The scammers have created two sites similar to the original PayPal site and sent users a link to one of them. Websites were designed to develop a sense of urgency to convey information to recipients. It is important not to get pulled into phishing very detailed information such as your password, address, or phone number.
Phishing via email has been detected in PayPal. The phishing campaign is about extracting as much data as possible from payers. Victims are informed that their account has been limited, they are asked about social security numbers or sending passport photos.
https://threatpost.com/active-paypal-phishing-scam-targets-ssns-passport-photos/152755/
New tactics for ransomware attackers. Thanks to outdated drivers, they turn off disturbing security by sending malicious ones. At the same time, it kills processes and files that belong to Windows security.
https://www.helpnetsecurity.com/2020/02/10/ransomware-signed-driver/
Emotet launched its attacks as a banking Trojan, transforming itself into a botnet, then criminals leased it to process malicious programming. Emotet delivered two-thirds of malicious payloads last year as part of phishing attacks. Malware does not slow down, and strikes were targeted at financial services, the food industry, the media, and transport. The strength of the attacks is enormous in the US, UK, and attempts have been recently made to the Philippines, Spain, and India.
Hackers operate without any hesitation; this time, attacks on industrial installations are prevalent. The Dragos company informs about a hazardous malware called Ekans or Snake. Malware is prepared to attack industrial systems, encrypt stored files. After encryption, the name changes (has a new extension), then the hackers a ransom demand. Data protection is significant; one way is to segment the ICS systems from the rest of the network; the other way is to back up systems and store them offline.
One and a half months after the publication of Positive Technologies about the disclosure of a critical security vulnerability of Citrix software, it happens that one in five companies still need to take action to remove the vulnerability.
https://www.techradar.com/news/many-businesses-still-havent-patched-citrix-flaw
According to the Open Resolver Project, attackers most often used insecure DNS servers in 2019, their number was 2.7 million in the world. Unfortunately, the bandwidth of attacks is still growing, and over 150% in four years.
https://www.helpnetsecurity.com/2020/02/10/frequency-ddos-attacks/
Some still remember the days when the door hung nameplates with the names of the inhabitants. It would be unthinkable now. Times have changed, and our personal data has become a desirable commodity, especially our online data.
A zero-day vulnerability or exploit cannot be detected because it ceases to be zero-day when detected. For this reason, they pose a serious threat. However, we are not completely deprived of combat tools. There are anti-virus programs that can detect zero-day vulnerabilities and exploits through algorithms that track behavioral patterns.
https://cyware.com/news/what-is-a-zero-day-vulnerability-and-how-can-it-impact-businesses-e2933d3a
