Malware

A spear phishing campaign impersonating the SEC was recently discovered attempting to infect victims with DNSMessenger malware, using malicious Word attachments that abuse Microsoft Windows' Dynamic Data Exchange (DDE) protocol.

FireEye called the attempt "early-stage reconnaissance" and believes North Korean operatives don't have the capability to disrupt the power supply.

With phishing and business email compromise-style attacks the primary methods used by cybercriminals to gain access to an organization, it is imperative that employees be taught what to look out for when going through their email. So SC Media asked some top cybersecurity executives for their best training tips.

The Dark Overlord expanded its attacks against schools last week when it took on two districts sending texts and emails that threatened the students safety if their ransom demand was not met.

Kovter Group malvertising campaign put millions at risk of ad fraud malware infections. Fake browser updates hoodwink users into installing malware.

Businesses must demand the security of their data and software creators must be held responsible for securing their products.

Last Thursday saw the official launch of the International Operation Technology Security Association (Iotsa) where John Noble, director of network management at the UK's NCSC called for industry cooperation and incident reporting.