Phishing

The emails claim LastPass will be going into maintenance, requiring action within 24 hours.

Attackers exploit the trusted professional social media platform to deploy a remote access trojan.

PDFSider has been observed in Qilin ransomware attacks and is actively used by multiple ransomware actors.

The technology sector continues to be the primary target for brand impersonation, with Google, Amazon, and Apple also appearing frequently in phishing campaigns.

Even the strongest forms of MFA can now be bypassed. Here's why it's time to move on to identity threat detection.

Attackers create fraudulent PayPal business accounts and use the platform's "Money Request" or "Invoice" feature.

Infosecurity Magazine reports that threat actors have leveraged fraudulent PayPal alerts to deploy legitimate remote monitoring and management tools in a bid to pilfer credentials as part of a phishing attack campaign.