Email security

Cobalt Strike beacons are being deployed in a new malware campaign involving fraudulent job-themed lures, which was initially identified in August, reports The Hacker News.

The Federal Trade Commission and the Department of Justice have been called on by Senate Majority Leader Chuck Schumer, D-N.Y., to bolster efforts in ensuring proper consumer data protection against cyberattacks and investigating threat actors behind hacking incidents, CNN reports.

More corporations are being targeted by the Royal ransomware operation, which was launched in January but has significantly ramped up malicious activity this month, imposing demands of $250,000 to more than $2 million for its targets, BleepingComputer reports.

More than one-third of cyberattacks during the first six months of 2022 were business email compromise attacks, with incidents rising by nearly twofold between the first and second quarter, reports SiliconAngle.

Open-source software, including KiTTY, PuTTY, Sumatra PDF Reader, TightVNC, and muPDF/Subliminal Recording installer, are being leveraged by Lazarus affiliate ZINC in new malware attacks, according to SecurityWeek.

Zscaler ThreatLabz researchers discovered that the Agent Tesla remote access trojan is being spread using Quantum Builder in a new malware campaign involving LNK files, The Hacker News reports.

TechCrunch reports that legislation amending the Cybersecurity Information Sharing Act of 2015 to push cyber threat reporting for cryptocurrency companies has been introduced by Sens. Marsha Blackburn, R-Tenn., and Cynthia Lummis, R-Wyo.

A proposed settlement has been reached in the lawsuit against Magellan Health, filed by the 270,000 patients whose data was compromised during an undetected phishing attack in 2019.