Search
Close this search box.

Blog

Insights on Data Security & Threat Intelligence

IRS Summer Tax forum – the things they don’t teach you

Lesson one: The IRS is a confirmed favorite of spammers, phishers and malware distributors. As an example consider the attacks from the last few weeks that have targeted users of the IRS’s electronic payment portal. This time the attack starts with an email about tax forums to train and serve

Read More >

Email Account Takeover Leads to BEC & VEC

In our most recent report, we describe our observations about phishing, BEC, and malware attacks including: Per capita, malicious inbox content has more than doubled within the past two years Almost 80% of malicious inbox threats are phishing attacks  Phishing attacks have been known as the origin of large breaches

Read More >

Getting the most out of Tumblr (for a work-at-home scam)

Tumblr is a microblogging platform that allows users to post text, images, videos, links, quotes and audio to their short-form blogs. The last few days have turned up Tumblr accounts being used by scammers to redirects users to their work-from-home sites. The redirection is based on functionality provided by Tumblr.

Read More >

US taxpayers beware

Cybercriminals targeting US taxpayers have launched a second wave of phony “tax payment rejected” emails. The first major outbreak started around June 21st. As before the emails warn recipients that their tax payments, submitted via the IRS’s electronic payment system, have been rejected. To understand why, recipients are provided with

Read More >

The LoveGame virus gets hearts racing

The LoveGame virus gets hearts racing  The concept sounds interesting: A new game called “lovegame” which is still freeware has been received as an email attachment. Email text: Hello Dear! Do you play games ? lovegame. us present new project This game is still freeware. You can find it in

Read More >

NACHA payment rejected – malware (not phishing)

Last week we reported about a large outbreak of emails that inform recipients of rejected IRS payments. The IRS theme has now been replaced with NACHA-themed emails that contain virtually identical content – including links to malware executable s that are presented as “self-extracting” PDF files. NACHA manages the development,

Read More >

YeheyTV searchers end up watching Fake Antivirus – SEO Poisoning

YeheyTV is an Internet site offering Filipino television shows online. The site has been around since 2009 and is frequented by Filipinos around the world. FakeAV distributors have exploited this popularity by using a Search Engine Optimization (SEO) poisoning attack directed at Internet users looking for the YeheyTV site.  Searching

Read More >

ForEx Stat Arb Malware disguised as PDF steals user data

Statistical arbitrage (abbreviated as Stat Arb or StatArb) as opposed to (deterministic) arbitrage, is associated with the statistical mispricing of one or more assets based on the expected value of these assets. (So now you know…). The attachment in the high-priority email below claims to be a plan for foreign

Read More >