Email security

Numerous companies and organizations including Global Ordnance, UMO Poland, Blue Sky Network, and The Commission for International Justice and Accountability have been impersonated by Russian state-sponsored threat group SEABORGIUM, also known as TA446, Callisto, and COLDDRIVER, to serve as lures in a phishing operation, according to The Record, a news site by cybersecurity firm Recorded Future.

Cloud company says the ransomware incident was isolated to its Hosted Exchange environment — no word yet on what data was affected.

BleepingComputer reports that U.S. cloud computing firm Rackspace Technology was impacted by a security incident that prompted an outage of its hosted Microsoft Exchange environments, which may have affected thousands of customers.

HP Wolf Security said it marks the first time archives have overtaken Office formats as the most popular malware delivery file.

Widespread gift card BEC attack detailed Cybercrime operation Lilac Wolverine has launched a massive gift card business email compromise attack, which lures targets into giving gift cards to individuals posing as seriously ill people or having lost relatives to illnesses, ZDNET reports.

A new report also found an imposing 257% increase in the number of web app and API attacks on the financial services sector.

Bots and scams have been increasingly used by cybercriminals amid the holiday shopping season, reports The Record, a news site by cybersecurity firm Recorded Future.

Researchers at Proofpoint revealed more technical details about SocGholish, the malware variant they identified earlier this month, highlighting its noteworthy tactics that differ from traditional phishing campaigns.