Category: Blog

Attack Exploits Vulnerability in Half of Email MTAs Globally

Attacks predicted for a freshly reported email server vulnerability have come true in less than a week. If you’re an email administrator, you should be aware of the attacks this week targeting a vulnerability in the Exim MTA server code (versions 4.87 to 4.91), the objective of which is to

When was the last time you assessed your organization’s complete HIPAA compliance?

Take a compliance self-assessment provided by the publisher HIPAA Journal. Download Now Are you covered? Half of all PHI breaches come from insider data theft or user negligence. HIPAA requires organizations to keep PHI secure for an extended period of time in order to demonstrate compliance and to respond to information requests.

It’s Back! Facebook Cryptominer Worm Reemerges

Digmine Campaign Redux  Back in 2017, we wrote a blog about a malware spreading on Facebook, which, it turns out, continues to be relevant today—referring to both the blog and the malware. At the time we had set ourselves the task of analyzing part of the 2017 Digmine campaign that

Top Data Retention and Budget Challenges Solved

With busy schedules, a need for instant delivery, and desire to leave a trail for tracking, it’s not surprising that a Gartner study revealed nearly 60% of the average business’ critical data is stored in e-mail. Internal communication and client exchanges are saved somewhere in the mass of personal content and overlooked

Phishing Targeting Real Estate Firms

Stories about real estate hacking and particularly phishing have appeared with increasing frequency in newspaper and blog headlines. Stories like the cybercriminals who stole client contact information from a DC-area real estate company, and with the information then created a “business email compromise” (BEC) scam, which resulted in $1.5 million

How to Identify Apple Phishing Email Scams

Recently, a lot of phishing campaigns have been moving the embedded links from the body of an email into an attachment, to increase the odds of evading detection. We theorize this is a kind of “social engineering” ploy to move the user along quickly and get them into a clicking

Emotet: From a Banking Trojan to One of the Most Advanced Botnets

In 2014, the Emotet malware started as a banking Trojan targeting European bank customers. Back then, nobody expected this malware would evolve into one of the most dangerous botnets in the world. We’ve been getting a lot of questions about the Emotet malware and its eponymous botnet, as its versatility

Emotet: Von einem Bank-Trojaner zu einem der fortgeschrittensten Botnets

2014 begann die Emotet-Malware als Bank-Trojaner, der europäische Bankkunden ins Visier nahm. Damals erwartete niemand, dass sich diese Malware zu einem der gefährlichsten Botnets weltweit entwickeln würde. Uns haben viele Fragen zur Emotet-Malware und dem gleichnamigen Botnet erreicht. Seine Vielseitigkeit hat dazu geführt, dass es weit verbreitet ist (eine Analyse