TRU Security

According to the FBI, business email compromise (BEC) scams grew by 65% last year. These attacks often start by spoofed emails that pretend to be a manager in your organization or government entity.

Recent phishing campaigns are targeting verified Twitter profiles with convincing emails, enticing victims to provide their Twitter credentials — supposedly in order to fix a problem with their verification badge.

A massive malware campaign has been distributing Magniber ransomware, disguised as Microsoft Windows updates.

A Conti ransomware attack affected multiple government services in Costa Rica, from the Finance Ministry to the Labor Ministry. One of the most recent victims is the Electricity Service of Cartago (JASEC).

Malware loaders commonly used by threat actors, such as BazaLoader and IcedID, are seemingly being replaced by a new loader called Bumblebee.

A new ransomware known as Black Basta has emerged, attacking at least 12 companies within its first three weeks of operation — including the American Dental Association and wind farm operator Deutsche Windtechnik.

African banks have found themselves to be an increasing target for remote access tools (RATs) that are deployed through typo-squatted domains and HTML smuggling tactics as a delivery method.