Phishing

Today's columnist, Mona Abutaleb, outlines six tips for mitigating ransomware and phishing attacks in health care environments.

Around two-thirds of emails that trained users reported as suspicious were false positives, according to newly released F-Secure telemetry.

One campaign posed as an HR department mandating vaccine information, another leveraged an XSS flaw to disguise a malicious download, and a third leveraged Verizon's Vzwpix service to mass-distribute emails.

The loss of employee productivity is also among the costliest to organizations, increasing from an average of $1.8 million in 2015 to $3.2 million in 2021.

Obfuscation techniques such as steganography can help the scanners circumvent security measures designed to prevent malicious attachments from being hosted on DocuSign's servers.

While threat actors have abused legitimate RTLO Unicode to evade detection for a decade, H-ISAC has observed a rise in these phishing attacks being used against the health care sector.

The researchers found that the AI pipeline was very effective at getting test subjects to not only click on a link, but also fill out a form field.