Stolen Information Used in Personalized Immigration-Themed Attack
Stolen Information Used in Personalized Immigration-Themed Attack ... Read More
When Data Tools Become Dangerous: MS Power BI Links Used in Phishing Campaigns
When Data Tools Become Dangerous: MS Power BI Links Used in Phishing Campaigns ... Read More
Threat Actors Exploit Government Website Vulnerabilities for Phishing Campaigns
Cofense Intelligence has continually observed the abuse or usage of legitimate domain service exploitation. This report highlights observed phishing threat actor abuse of .gov top-level domains (TLDs) for different countries over two years from November 2022 to November 2024 ... Read More
Malware Alert: Fake Judicial Review Emails Deliver SapphireRAT Targeting Latin American Victims
The Cofense Phishing Defense Center (PDC) has discovered a new wave of sophisticated attacks that leverage judicial receipts for legal processes with multiple-layer techniques to distribute and execute SapphireRAT. ... Read More
AI Alone is Not Bulletproof: Weaknesses in AI/ML Email Security
Despite modern secure email gateways (SEGs) embracing AI capabilities, many phishing emails still reach users' inboxes. Therefore, employees need proper training to be able to identify attacks ... Read More
So, You Got a SEG. Do You Got an Un-SEG?
Let’s start by saying that if you’re operating any significantly sized business and you don’t have a secure email gateway (SEG) or some equivalent email security tool that connects to your email system and filters out unwelcome spam and highly unwanted malicious emails, then please get one in place ... Read More
Hackers Spoof Social Security Administration to Deliver ScreenConnect Remote Access Tool
Cofense Intelligence has recently issued a Flash Alert regarding a Social Security Administration-spoofing campaign that delivers ConnectWise RAT ... Read More
Holiday Bonus-Themed QR Code-Based Credential Phishing
Cofense Intelligence has recently identified a series of end-of-year and holiday bonus-themed credential phishing emails ... Read More
Phishing in Disguise: How Email Security Brand Spoofing Erodes Trust
A secure email is an email that uses encryption and authentication to protect the privacy and integrity of the shared information. ... Read More
SAT is Dead
Security awareness training (SAT) has been around for over a decade and is now common practice. Today, most responsible corporations run an SAT program. That might seem like a victory for internet security, and in a sense, it is. Yet, from the point of view of improving cybersecurity outcomes, most ... Read More
