Distributed Workforce

Digital document publishing sites have been exploited by threat actors to facilitate new phishing attacks that better bypass email security controls.

Intrusions commence with the delivery of salary-themed phishing emails with a Microsoft Word attachment.

The newly discovered China-linked APT group abused trust between governments.

The International Monetary Fund had 11 of its email accounts compromised following a cyberattack last month.

Android banking trojan PixPirate has been updated to enable the concealment of the malicious app delivering the malware from targeted devices to facilitate stealthier intrusions across Brazil,.

Henry Onyedikachi Echefu was noted by the U.S. Department of Justice to have pleaded guilty over his participation in a business email compromise scam with two other Nigerians between 2016 and 2017.

Seven malicious Python Package Index packages, which amassed nearly 7,500 downloads prior to their removal, have been leveraged by threat actors to facilitate the exfiltration of cryptocurrency wallet recovery passwords.

Attackers leveraging the 'no-reply@dropbox[.]com' domain sent emails with a Dropbox-hosted PDF to employees using the Darktrace SaaS environment.