Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. link: https://threatpost.com/0ktapus-victimize-130-firms/180487/ Author: Nate Nelson
iPhone Users Urged to Update to Patch 2 Zero-Days
Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. link: https://threatpost.com/iphone-users-urged-to-update-to-patch-2-zero-days-under-attack/180448/ Author:…
New Hacker Forum Takes Pro-Ukraine Stance
A uniquely politically motivated site called DUMPS focuses solely on threat activity directed against Russia and Belarus link: https://threatpost.com/pro-ukraine-forum/180387/ Author: Elizabeth Montalbano
Cisco Confirms Network Breach Via Hacked Employee Google Account
Networking giant says attackers gained initial access to an employee’s VPN client via a compromised Google account. link: https://threatpost.com/cisco-network-breach-google/180385/ Author: Threatpost
Virtual Currency Platform ‘Tornado Cash’ Accused of Aiding APTs
U.S. Treasury blocked the business of the virtual currency mixer for laundering more than $7 billion for hackers, including $455 million to help fund North Korea’s missile program. link: https://threatpost.com/virtual-currency-platform-tornado-cash-accused-of-aiding-apts/180367/…
Phishers Swim Around 2FA in Coinbase Account Heists
Attackers are spoofing the widely used cryptocurrency exchange to trick users into logging in so they can steal their credentials and eventually their funds. link: https://threatpost.com/phishers-2fa-coinbase/180356/ Author: Elizabeth Montalbano
Open Redirect Flaw Snags Amex, Snapchat User Data
Separate phishing campaigns targeting thousands of victims impersonate FedEx and Microsoft, among others, to trick victims. link: https://threatpost.com/open-redirect-flaw-snags-amex-snapchat-user-data/180354/ Author: Elizabeth Montalbano
Threat Actors Pivot Around Microsoft’s Macro-Blocking in Office
Cybercriminals turn to container files and other tactics to get around the company’s attempt to thwart a popular way to deliver malicious phishing payloads. link: https://threatpost.com/threat-pivot-microsofts-macro/180319/ Author: Elizabeth Montalbano
Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands
Instances of phishing attacks leveraging the Microsoft brand increased 266 percent in Q1 compared to the year prior. link: https://threatpost.com/popular-bait-in-phishing-attacks/180281/ Author: Nate Nelson
Hackers for Hire: Adversaries Employ ‘Cyber Mercenaries’
Also known as the Atlantis Cyber-Army, the emerging organization has an enigmatic leader and a core set of admins that offer a range of services, including exclusive data leaks, DDoS…