BleepingComputer reports that widely used password management service LastPass is having its customers subjected to a new attack campaign involving the sophisticated CryptoChameleon phishing kit aimed at exfiltrating cryptocurrency assets.
BlackBerry researchers disclosed that a major U.S.-based multinational automaker had been targeted by the FIN7 hacking group in a spear-phishing attack late last year that sought to facilitate systems compromise with the Anunak malware, BleepingComputer reports.
There’s no easy way to ward off spam – organizations need a mix of advanced email filtering, security protocols, modern data security tools, and user education.
Iranian state-backed threat operation MuddyWater, also known as TA450, Mango Sandstorm, and Boggy Sandstorm, has leveraged the novel DarkBeatC2 command-and-control infrastructure tool as part of its latest attack campaign, The Hacker News reports.
LastPass has disclosed having been unsuccessfully targeted by a voice phishing attack that involved deepfake audio spoofing CEO Karim Toubba, according to BleepingComputer.
Windows systems across Latin America have been targeted with malicious payloads delivered through a sophisticated phishing attack campaign, The Hacker News reports.