Email security

Both Tycoon and Storm-1575 have also been leveraging adversary-in-the-middle phishing to circumvent multifactor authentication protections.

Reported losses suffered by U.S. victims of ransomware attacks jumped 74% last year, according to the agency’s latest IC3 annual report.

Intrusions by TA4903, which have ramped up since the second half of last year, involved the delivery of malicious PDF document attachments spoofing government entities.

Organizations have been subjected to attacks by initial access broker TA577, also known as Hive0118, aimed at exfiltrating Windows NT LAN Manager authentication data.

The Russian hacking group switched to attacking cloud-hosted networks to gain initial access.

Guardio Labs researchers say popular tech brands exploited include MSN, VMware, McAfee and eBay.

Over 1.5 million malicious emails have evaded secure email gateways in 2023, representing a 37% and 310% growth over 2022 and 2021, respectively, reports SiliconAngle.

The UK's Stratford-on-Avon District Council reported that almost 79,000 email addresses have been stolen as part of an insider data breach in November, according to The Register.