phishing

Canadian university scammed out of $11.8 million

September 1, 2017

MacEwan University in Edmonton, Alberta, is the latest confirmed victim of scammers. “On Wednesday, August 23, MacEwan University discovered it had been the victim of a …

Office 365 account compromise attempts on the rise

August 31, 2017

Office 365, Microsoft’s software-as-a-service productivity software suite popular with corporate users, is increasingly becoming attackers’ preferred way into …

Global DMARC adoption still slow, it’s open season for phishers

August 24, 2017

92 percent of U.S. Fortune 500 companies have left their customers, partners and brand names vulnerable to domain name spoofing, one of the most common digital deception …

Attackers turn to auto-updating links instead of macros to deliver malware

August 18, 2017

SANS ISC handler Xavier Mertens has flagged and analyzed a malicious Word file that, somehow, is made to automatically download an additional malicious RTF file, ultimately …

Google wants iOS Gmail users to think twice about following suspicious links

August 13, 2017

Google has announced the rollout of new anti-phishing checks for the iOS Gmail app: in less than two weeks, all users will be confronted with two warnings if they attempt to …

Obscuring malicious Facebook links using the Open Graph Protocol

August 7, 2017

Most users click on links popping up in their Facebook News Feed without thinking twice about it, but it’s good to keep in mind that they can lead to malicious sites. …

Another popular Chrome extension hijacked through phishing

August 3, 2017

Chris Pederick, the creator and maintainer of the Web Developer for Chrome extension, is the latest victim of attackers who hijack popular Chrome add-ons in order to push ads …

Phishers steal Chrome extension from developer

July 31, 2017

An attacker has compromised the Chrome Web Store account of German developer team a9t9 software, and has equipped their Copyfish Chrome extension with ad/spam injection …

Seagate to pay millions for forking over employee info to scammers

July 31, 2017

A moment of inattention by one of its employees, and Seagate stands to lose tens of millions of dollars. No, the company was not the victim of a BEC scam – instead, it …

Phishers’ techniques and behaviours, and what to do if you’ve been phished

July 28, 2017

Once a user has been phished, how long does it takes for the phishers to misuse the stolen credentials? To discover the answer to that question and many others, Imperva …

BEC scams: How to avoid them and how to fight back

July 13, 2017

Phishing and spear-phishing emails are a constant threat to all users, but enterprises are positively inundated with them. “Most businesses will use a spam filter and …

Enterprises face 3,680 potential phishing emails each week