• Trend Micro
  • About TrendLabs Security Intelligence Blog
Search:
  • Home
  • Categories
    • Ransomware
    • Vulnerabilities
    • Exploits
    • Targeted Attacks
    • Deep Web
    • Mobile
    • Internet of Things
    • Malware
    • Bad Sites
    • Spam
    • Botnets
    • Social
    • Open source
Home   »   Search results for: spear phishing

Pawn Storm Ramps Up Spear-phishing Before Zero-Days Get Patched

  • Posted on:November 9, 2016 at 5:00 am
  • Posted in:Exploits, Targeted Attacks, Vulnerabilities
  • Author:
    Trend Micro
0

The effectiveness of a zero-day quickly deteriorates as an attack tool after it gets discovered and patched by the affected software vendors. Within the time between the discovery of the vulnerability and the release of the fix, a bad actor might try to get the most out of his previously valuable attack assets. This is exactly what we saw in late October and early November 2016, when the espionage group Pawn Storm (also known as Fancy Bear, APT28, Sofacy, and STRONTIUM) ramped up its spear-phishing campaigns against various governments and embassies around the world.  In these campaigns, Pawn Storm used a previously unknown zero-day in Adobe’s Flash (CVE-2016-7855, fixed on October 26, 2016 with an emergency update) in combination with a privilege escalation in Microsoft’s Windows Operating System (CVE-2016-7255) that was fixed on November 8, 2016.

Read More
Tags: Adobe zero-day exploitPawn Stormspear-phishing emailWindows zero-day exploit

The Ins and Outs of Spear-Phishing

  • Posted on:November 28, 2012 at 8:05 am
  • Posted in:Spam
  • Author:
    Roland Dela Paz (Threat Researcher)
0

In the discussion of targeted attacks, it is usually taken for granted that they arrived via some sort of spear-phishing attack. The discussion then goes into an analysis of the malware involved and/or the servers used or compromised in the attack. However, to avoid attacks in the first place, it is of value to look…

Read More

Water Nue Phishing Campaign Targets C-Suite’s Office 365 Accounts

  • Posted on:August 6, 2020 at 5:02 am
  • Posted in:Cloud, Targeted Attacks
  • Author:
    Trend Micro
0

A series of ongoing business email compromise (BEC) campaigns that uses spear-phishing schemes on Office 365 accounts has been seen targeting business executives of over 1,000 companies across the world since March 2020. The recent campaigns target senior positions in the United States and Canada.

The fraudsters, whom we named “Water Nue,” primarily target accounts of financial executives to obtain credentials for further financial fraud. The phishing emails redirect users to fake Office 365 login pages. Once the credentials are obtained and accounts are successfully compromised, emails containing invoice documents with tampered banking information are sent to subordinates in an attempt to siphon money through fund transfer requests.

Read More
Tags: business email compromisecredential phishingemail fraudoffice 365phishing

Operation Woolen-Goldfish: When Kittens Go Phishing

  • Posted on:March 18, 2015 at 11:08 pm
  • Posted in:Targeted Attacks
  • Author:
    Cedric Pernet (Threat Researcher)
0

Today, we are publishing a research paper on an ongoing operation launched by a threat actor group known as Rocket Kitten. Rocket Kitten Campaigns We have been able to observe two different campaigns launched by the group, one after the other, which reveal an evolution in the skills of this group. The first of these campaigns…

Read More
Tags: MalwareRocket KittenTargeted AttackWoolen Goldfish

Cybercrime Exposed Part 1: The Security Risks of Phishing

  • Posted on:July 28, 2014 at 12:09 pm
  • Posted in:Bad Sites, Malware, Spam
  • Author:
    Bernadette Irinco (Technical Communications)
0

While new threats are emerging that hit new avenues or targets like PoS systems and cryptocurrencies, old threats like phishing remains to be an effective means of gathering user data. A simple spam email that leverages holidays, online shopping, release of anticipated gadgets, and hot/current news items can redirect unsuspecting users to survey scams and phishing pages that…

Read More
Tags: cybercrimedata securityMalwareonline bankingphishing
Page 1 of 2912 › »

Security Predictions for 2020

  • Cybersecurity in 2020 will be viewed through many lenses — from differing attacker motivations and cybercriminal arsenal to technological developments and global threat intelligence — only so defenders can keep up with the broad range of threats.
    Read our security predictions for 2020.

Business Process Compromise

  • Attackers are starting to invest in long-term operations that target specific processes enterprises rely on. They scout for vulnerable practices, susceptible systems and operational loopholes that they can leverage or abuse. To learn more, read our Security 101: Business Process Compromise.

Popular Posts

Sorry. No data so far.

Stay Updated

  • Home and Home Office
  • |
  • For Business
  • |
  • Security Intelligence
  • |
  • About Trend Micro
  • Asia Pacific Region (APAC): Australia / New Zealand, 中国, 日本, 대한민국, 台灣
  • Latin America Region (LAR): Brasil, México
  • North America Region (NABU): United States, Canada
  • Europe, Middle East, & Africa Region (EMEA): France, Deutschland / Österreich / Schweiz, Italia, Россия, España, United Kingdom / Ireland
  • Privacy Statement
  • Legal Policies
  • Copyright © Trend Micro Incorporated. All rights reserved.