Phishing email that spoofs an SBA loan program for companies affected by COVID-19 (Source: Malwarebytes)

Phishing Campaign Spoofs SBA Loan Offer

Prajeet Nair • August 10, 2020

Malwarebytes reports that a newly discovered phishing campaign is spoofing a U.S. Small Business Administration loan offer in an attempt to steal banking credentials and other personal data.

Account Takeover

Screams, Porn Interrupt Virtual Hearing for Twitter Suspect

Latest

COVID-19

Ransomware Reportedly Hits Ventilator Maker

Marianne Kolbasuk McGee • August 10, 2020

A manufacturer of transit communication systems that pivoted to build ventilators during the COVID-19 pandemic is reportedly the latest victim of the DoppelPaymer ransomware gang.

Business Email Compromise (BEC)

BEC Scam Targets Executives' Office 365 Accounts

Chinmay Rautmare • August 10, 2020

A recently uncovered BEC scam has targeted the Office 365 accounts of executives at over 1,000 companies worldwide, collecting more than 800 sets of credentials in an attempt to commit payment fraud, according to Trend Micro.

COVID-19

Barclays Faces Employee Spying Probe

Mathew J. Schwartz • August 10, 2020

The UK's privacy watchdog is probing banking giant Barclays over its use of employee monitoring tools after the bank in February reportedly shifted from anonymized tracking to giving managers the ability to view data for individual employees.

Cloud Security

Capital One Fined $80 Million Over 2019 Breach

Chinmay Rautmare • August 7, 2020

A federal banking regulator has fined Capital One $80 million, citing numerous security shortfalls before the 2019 data breach that exposed the financial and personal information of over 100 million individuals in the U.S. and Canada.

Cybercrime

Researchers: IoT Botnets Could Influence Energy Prices

Akshaya Asokan • August 7, 2020

High-wattage IoT devices and appliances, such as connected refrigerators, air conditioners and heaters, could be turned into massive botnets by malicious actors and used to influence energy prices, according to an academic study released at Black Hat 2020.

Application Security

Analysis: Hijacking of Twitter Hacker's Virtual Hearing

Anna Delaney • August 7, 2020

The latest edition of the ISMG Security Report analyzes the hijacking of a virtual court hearing in the Twitter hacking case. Also featured: Why network segmentation is more important than ever; update on Windows print spooler vulnerability.

Cybercrime

Exploring the Forgotten Roots of 'Cyber'

Mathew J. Schwartz • August 7, 2020

One day, you may drive your Tesla Cybertruck on Cyber Monday to your cybersecurity job, backed by a cyber insurance policy as you safeguard cyberspace against the threat of cyberwar. Or cyber whatever, since we've obviously entered the era of "maximum cyber." But what does cyber even mean?

Cybercrime

Global Cybercrime Surging During Pandemic

Marianne Kolbasuk McGee • August 6, 2020

Cybercriminals have shifted their focus from individuals and smaller businesses to target governments, critical health infrastructure and major corporations to maximize their profits and disruption during the COVID-19 pandemic, a new Interpol report warns.

Endpoint Security

Twitter Rushes to Fix Flaw in Android Version

Chinmay Rautmare • August 6, 2020

Twitter rushed out a fix for a flaw in the Android version of its social media platform that could have allowed hackers to access user data, including within the direct message feature. The news comes as more details have emerged about a recent Twitter hacking incident.

Endpoint Security

Garmin Reportedly Paid a Ransom

Doug Olenick • August 5, 2020

Garmin, a fitness tracker and navigation device firm, apparently paid a ransom to recover from a July 23 security incident that encrypted several of its systems, according to two news reports as well as expert analysis. The company says it's still experiencing 'temporary limitations" on services.

Endpoint Security

How WastedLocker Evades Anti-Ransomware Tools

Prajeet Nair • August 5, 2020

WastedLocker, a ransomware strain that reportedly shut down Garmin's operations for several days in July, is designed to avoid security tools within infected devices, according to a technical analysis from Sophos.

COVID-19

Pandemic Impact: How Will Data Breaches Evolve?

Mathew J. Schwartz • August 5, 2020

Will the COVID-19 pandemic lead to a spike in the number of reported data breaches? Not necessarily, says cybersecurity expert Brian Honan. But he says that the rush to adopt cloud-based services and expanded remote services might change the types of breaches being reported.