Completing Security Visibility News Today : Breaking News, Live Updates & Top Stories | Vimarsana

GovInfoSecurity Compliance Twitter Cybercriminals are using fake online Amazon gift cards to distribute the Dridex banking Trojan. Cybercriminals are targeting online shoppers in the U.S. and Western Europe with fake Amazon gift cards that deliver the the Dridex banking Trojan, the security firm Cybereason reports. Since the campaign began earlier this month, the attackers have targeted thousands of victims in the U.S. and Western European countries, where Amazon is a popular shopping destination and has local websites, according to Cybereason researchers. "2020, for obvious reasons, is a ...

BankInfoSecurity Twitter Cybercriminals are using fake online Amazon gift cards to distribute the Dridex banking Trojan. Cybercriminals are targeting online shoppers in the U.S. and Western Europe with fake Amazon gift cards that deliver the the Dridex banking Trojan, the security firm Cybereason reports. Since the campaign began earlier this month, the attackers have targeted thousands of victims in the U.S. and Western European countries, where Amazon is a popular shopping destination and has local websites, according to Cybereason researchers. "2020, for obvious reasons, is a year where...

"We have identified a global campaign that introduces a compromise into the networks of public and private organizations through the software supply chain," FireEye CEO Kevin Mandia announced in a Sunday blog post. "This compromise is delivered through updates to a widely used IT infrastructure management software - the Orion network monitoring product from SolarWinds. The campaign demonstrates top-tier operational tradecraft and resourcing consistent with state-sponsored threat actors." Left unsaid in Mandia's statement was that FireEye was one of the victims of the campaign against an unkno...

Malicious domain designed to look like an Office 365 landing page (Source: Abnormal Security) An ongoing phishing campaign designed to harvest Office 365 credentials is using a Microsoft Outlook migration message, according to researchers at Abnormal Security. The phishing emails, which are designed to look as if they come from the IT department of the victims' organizations, say the recipient must update to the latest version of Microsoft Outlook, according to the report. When victims click a link within the phishing email, they are directed to a malicious domain that shows an older version ...