Just as some question the validity of supposed ties between the groups, or association with Russia's Federal Counterintelligence Service, some see the claims as a potential red herring.
Attackers impersonating Quickbooks on the Microsoft 365 platform create a sense of urgency to compel their victims to “promptly” pay fake invoices allegedly from a legitimate vendor, thereby opening them up to a future malicious act.
Security researchers are warning that the once-dormant Bandook malware family is back and could possibly be part of a broader operation selling offensive hacking tools to governments and cybercriminal groups.
Roger Grimes of KnowBe4 maintains that antivirus and firewalls are worthless, noting that after 30 years the industry faces more threats than ever. Grimes believes that most people pay attention to firewall logs when they first enter the security field, but after the first few years they become background noise.
Unlike with an email-based phish where an employee might be observant enough spot a telltale red flag, such as multiple typos or the wrong sender address, there's little time to key in on suspicious circumstances in the midst of a dialogue.
