Email security

Deep Instinct researchers say just because security pros don’t see a prevalence of infections from a specific group, it doesn’t mean the threat actors aren’t maintaining a presence or monitoring devices.

Much of the focus this year has been on ransomware, but cybercriminals make more money on business email compromises than any other types of attacks.

Outlook and Thunderbird account credentials are being stolen by the novel StrelaStealer info-stealing malware, BleepingComputer reports.

More threat actors have been leveraging the InterPlanetary File System for bulletproof malware hosting, SecurityWeek reports.

Risky security behaviors are being sought to be reduced by KnowBe4's new SecurityCoach service, which provides human detection and response, as well as real-time security coaching, reports SiliconAngle.

The Zeon threat group sent tens of thousands of targeted messages to healthcare providers in October, impersonating software solutions of big brand vendors, according to a Health-ISAC member alert.

New phishing campaigns have been targeting verified Twitter users amid Twitter CEO Elon Musk's announcement of the platform's plans to charge $8 per month for Twitter Blue and account verification, according to BleepingComputer.