Malware

A new and very ambitious malicious Chrome extension called Ldi has been uncovered, one that injects the Coinhive cryptocurrency miner into the target computer, accesses the victim's Gmail and Facebook accounts and registers newly created domains in that person's name.

The cybergang behind the Trickbot banking trojan appears to have set its sights on Latin American as it continues to expands its list of global targets.

Locky ransomware made an unexpected jump into second place on Check Point's Most Wanted Malware of the month list, but was unable to unseat Roughted malverstising software for the top spot.

A spear phishing campaign impersonating the SEC was recently discovered attempting to infect victims with DNSMessenger malware, using malicious Word attachments that abuse Microsoft Windows' Dynamic Data Exchange (DDE) protocol.

FireEye called the attempt "early-stage reconnaissance" and believes North Korean operatives don't have the capability to disrupt the power supply.

With phishing and business email compromise-style attacks the primary methods used by cybercriminals to gain access to an organization, it is imperative that employees be taught what to look out for when going through their email. So SC Media asked some top cybersecurity executives for their best training tips.