The forgotten malvertising campaign
A sophisticated threat actor has been using Google ads to deliver custom malware payloads to victims for months while flying under the radar. In recent…
Category: MalwareBytes
Explained: Quishing
We explain what quishing is and provide information about some current quishing campaigns. Quishing is phishing using QR (Quick Response) codes. QR codes are basically two-dimensional…
Giant health insurer struck by ransomware didn’t have antivirus protection
The Philippine Health Insurance Corporation (PhilHealth), has confirmed that it was unprotected by antivirus software when it was attacked by the Medusa ransomware group in…
Update now! Atlassian Confluence vulnerability is being actively exploited
Microsoft Threat Intelligence has revealed that it has been tracking the active exploitation of a vulnerability in Atlassian Confluence software since September 14, 2023. Microsoft…
CISA catalog passed 1,000 known to be exploited vulnerabilities. Celebration time, or is it?
The CISA Known Exploited Vulnerabilities catalog has grown to cover more than 1,000 vulnerabilities since its launch in November 2021. On September 18, 2023, the…
Stalkerware activity drops as glaring spying problem is revealed
North America has a spying problem. Its perpetrators are everyday people. North America has a spying problem. Its perpetrators are everyday people. According to recent…
Ransomware review: October 2023
In September, two high-profile casino breaches taught us about the nuances of the RaaS affiliate landscape, the asymmetric dangers of phishing, and of two starkly…
23andMe users’ data stolen, offered for sale
Information belonging to as many as seven million 23andMe customers has been put up for sale on criminal forums following a credential stuffing attack. Information…
Upgrading your Android device? Read this first
A few tips and how-tos for when you are ready to move to the next Android phone. Backup, transfer, wipe, and move on. Last month,…
AI sneak attacks, location spying, and definitely not malware, or, what one teenager fears online: Lock and Code S04E21
This week on the Lock and Code podcast, we speak with Bay Area teenager Nitya Sharma—for the second year in a row—about what she’s most…
Amazon Prime email scammer snatches defeat from the jaws of victory
A very convincing Amazon Prime scam landed in our mail server today and…went straight to spam. Here’s why. More often than not, its our solemn…
Multi-factor authentication has proven it works, so what are we waiting for?
Amazon has announced it will require all privileged AWS to use MFA in the near future. Let’s hope others follow. Recently, Amazon announced that it…