What happened: Votiro’s Research Team has discovered a malicious macro that delivers a Dridex trojan payload hiding in Microsoft Excel spreadsheets delivered via phishing emails appearing to be from UPS, FedEx, and DHL. The Excel spreadsheet includes an obfuscated macro that launches PowerShell in hidden mode and downloads the payload from geronaga.com, a website that…
On July 23, 2020, American GPS and fitness-tracker company Garmin was hit by a ransomware attack that caused widespread disruption to the company’s online services and affected millions of users who rely on the technology in their daily lives. The attack encrypted Garmin’s internal network and caused the company to implement a multi-day maintenance window…
Job security has taken on a new meaning, with a new cyber-espionage attempt that has recently come to light. Between September to December 2019, employees at select aerospace and military organizations in Europe and the Middle East were targeted with a LinkedIn phishing campaign. The campaign’s malevolent goal was to gain intelligence information about employees…
Object Linking and Embedding Technology (OLE) enables Microsoft users to connect collateral created in other software applications into Microsoft files. OLE Technology can enhance user experience and productivity through their ability to create compound documents that support a host of software applications, such as Microsoft Windows applications, Corel WordPerfect, Adobe Acrobat, AutoCAD, and multimedia applications….
New Addition to M.Tech’s Portfolio Advances Votiro’s Secure File Gateway Throughout APAC region to Mitigate Risk of File-Borne Threats Tel Aviv, Israel (July 15, 2020) — Votiro, a global leader in positive selection technology™, today announced a partnership with M.Tech, the leading cybersecurity and network solutions provider, to expand access to their Secure File Gateway™…
Security incidents can cause enterprises severe reputational and financial damage. Many of these originate due to users downloading malicious files, clicking on risky links, and engaging with online advertisements containing malware, also known as malvertising campaigns. Unfortunately, preventative measures, such as limiting employee web browsing come at a cost, as these measures can have negative…
In mid-2019, leadership from The Monetary Authority of Singapore announced a Notice on Cyber Hygiene that imposes cybersecurity regulations on Singapore’s financial institutions, including but not limited to banks, insurance brokers, financial advisors, and e-payment companies. The Notice on Cyber Hygiene goes into effect on August 6, 2020 for the purpose of strengthening the security…
In recent months, there has been a significant uptick in malicious campaigns directed at companies within healthcare, financial services, critical infrastructure, among others. In fact, research indicates that hacking and phishing attacks rose over six-times their typical level in March. According to government intelligence agencies, the trend still continues today. One illustrative example is the…
On May 19, Microsoft warned of a massive phishing scam that takes advantage of the COVID-19 pandemic by luring unsuspecting users into opening legitimate-looking Excel files that contain malicious macros. These malicious macros utilize VBA programming in Microsoft Office macros to inject a user’s system with malware. Cybercriminals have tapped into this simple and inexpensive…