Distributed Workforce

Attackers have been leveraging a novel phishing approach that involves the creation of an unusual link with an "@" symbol in between, which browsers identify as legitimate domains and therefore allows evasion of security systems, according to Threatpost.

Varonis team shows how threat actors can use spoofed Vanity URLs to launch varied attacks via Software-as-a-Service accounts.

Business email compromise (BEC) has often flown under the radar, creating an increasingly healthy source of funds for fraudsters in recent years.

VentureBeat reports that Abnormal Security has secured a $210 million investment from a Series C funding round, which will be allocated toward improving its cloud-native email security platform to better mitigate business email compromise and other email-based attacks.

Proofpoint researchers say novel malware uses COVID-19 and World Health Organization themes to spread in Italy, Spain and the United Kingdom.

Security researchers advise teams to patch immediately because the flaw lets attackers execute remote commands across Azure integration runtimes.

Ukraine is being hit by a widespread phishing campaign that distributes the Jester Stealer information-stealing malware, according to The Hacker News.

Threatpost reports that a cybercriminal dubbed "crystalcoder" or "boldenis44" has been selling the Dark Crystal RAT, or DCRat, malware only for $6 for a two-month subscription, with the malware offered at even lower prices during promos.