Email security

The campaign leveraged more than 630 HTML files to lure victims to fake login pages.

US universities subjected to 'payroll pirate' intrusions Twenty-five universities across the U.S. have had their employees targeted by the Storm-2657 threat operation with phishing emails looking to divert salary payments as part of a payroll piracy campaign that commenced in March, according to The Record, a news site by cybersecurity firm Recorded Future.

The attack leveraged a malicious iCalendar invite over Zimbra email.

Attacks spreading the new FoalShell and StallionRAT payloads have been launched by the Cavalry Werewolf threat operation against state agencies and energy, manufacturing, and mining firms across Russia as part of a new phishing campaign that ran between May and August, reports The Hacker News.

The group also shifted from malicious PowerPoint files to LNK attachments for initial access.

While Oracle said customers received extortion emails, it did not tie the case to Clop, which reportedly claimed responsibility.

Attacks prompt inline SVG image blocking in Microsoft Outlook Increasingly prevalent cyber intrusions involving inline Scalable Vector Graphics images have prompted Microsoft to stop displaying such images in Outlook for Web and the new Outlook for Windows, according to BleepingComputer.