News that Equifax has had to spend US$87.5 million and counting on its recent data breach should serve as a warning to Australian companies as the era of mandatory data breach disclosure approaches. There are encouraging signs that consumers and business are taking the incoming laws seriously. But we need to look towards the healthcare sector to understand that…
In the wake of Dynamic Data Exchange (DDE) attacks, the subject of Quick Fields has come into focus among cybersecurity pros as well. These, too, have the potential to become a major security problem, and some researchers have stepped up to the challenge and begun exploring the world of Word Quick Fields, and their implications….
Another Netflix phishing campaign was seen in the wild prompting customers to update their login credentials or risk being locked out of their account. A similar scam occurred earlier this year. Mailguard researchers described the email used in the scam as being relatively well designed and said the scammers are using a template system to generate individualized messages with specific recipient data,…
A Cybersecurity Ventures report indicates ransomware costs will exceed $5 billion in 2017, up from $325 million in 2015–what can be done from preventing these attacks from happening? Late last month, another ransomware attack slammed Ukraine and Russia–the second major one since the NotPetya attack in June–igniting speculation that the severity of these attacks are only going to get worse from…
Highly paid professional hackers often operate like a ‘regular’ business when they come together. Sales and marketing. ROI. Quarterly performance statements. Reports to investors. And, salaries, bonuses, expense accounts, and petty cash for employee birthday parties. It’s all part of the day-to-day running of a business – any business, including those in the hacking industry. And a…
Over the last few weeks, we collaborated with ClearSky and uncovered several indicators that were researched and found to be related to a new hacking campaign targeting large Vietnamese organisations. This campaign was found to be connected to the same party which previously targeted Vietnam Airlines and some other high profile targets possibly led by the Chinese 1937CN group. In this post we…
Attack details A new strain of ransomware has been discovered in-the-wild – and it features some unique tricks to keep itself below antivirus and security solutions.The infection chain most likely begins with an email containing a Windows Script File (WSF) attachment. We say “most likely” because no such email has surfaced yet – but as…
Over the last few weeks, we collaborated with ClearSky and uncovered several indicators that were researched and found to be related to a new hacking campaign targeting large Vietnamese organisations. This campaign was found to be connected to the same party which previously targeted Vietnam Airlines and some other high profile targets possibly led by the Chinese 1937CN group. In this post we…
On Tuesday, a number of Ukrainian banks and financial firms, including the state power distributor, were hit by a cyber attack disrupting operations, according to the Ukrainian National bank who said an “unknown virus” was to blame. We will share some of our findings, explaining why Votiro’s customers are protected from that attack. Today, the…