In 2017, the victims of BEC fraud were stung for $676 million, almost double the loss totals reported in the previous year The post Losses from BEC scams rising fast and furious appeared first on WeLiveSecurity

While the exact amount of stolen money and source of the cybercriminals are not known, the authorities have confirmed that no clients were affected. The post Mexico: Cybercriminals steal at least 400 million pesos through unauthorized transfers appeared first on WeLiveSecurity

We’re not in it for prizes (or cakes), but there’s no denying that we’re thrilled to be a finalist for the European Security Blogger Awards – and in five categories at that! The post WeLiveSecurity in running for European Security Blogger Awards. Vote now! appeared first on WeLiveSecurity

Use of software by law enforcement as a surveillance tool is a real concern for groups The post Amazon Rekognition a possible threat to the civil rights of citizens appeared first on WeLiveSecurity

ESET researchers have observed a significant change in the campaign of the infamous espionage group The post Turla Mosquito: A shift towards more generic tools appeared first on WeLiveSecurity

Get a better understanding of cybersecurity with this list of free online courses that you can take to become more cyber-aware The post 14 free online courses about computer security appeared first on WeLiveSecurity

While training employees will not guarantee complete cyber safety for companies, it could go a long way to making workers more cyber-aware The post Cybersecurity training still neglected by many employers appeared first on WeLiveSecurity

One-third of audited codebases that contain Apache Struts suffer from the same vulnerability that facilitated the Equifax hack a year ago The post Open source code is ubiquitous and so are many vulnerabilities appeared first on WeLiveSecurity

The Dark Overlord, known for a number of breaches and cyber-extortion campaigns in the last two years, is believed to have made US$275,000 from various schemes The post Suspected member of The Dark Overlord arrested in Serbia appeared first on WeLiveSecurity

With the deadline fast approaching SMBs are reminded of what is required to become compliant The post Last call for GDPR appeared first on WeLiveSecurity

The move is intended to help address the mobile platform’s perennial problem – that many manufacturers of Android-powered devices are slow to get software updates out the door The post Google to require Android device-makers to roll out OS security patches regularly appeared first on WeLiveSecurity

Recent survey shows that adults in the US view computer hacking as a major threat to their quality of life The post Seven out of ten see criminal hacking as big risk to health, safety, prosperity appeared first on WeLiveSecurity

A team of academics says that, if exploited, the vulnerabilities can reveal the plain text of encrypted emails, including those sent years ago The post Researchers reveal flaws that may expose encrypted emails to prying eyes appeared first on WeLiveSecurity

Double zero-day vulnerabilities fused into one. A mysterious sample enables attackers to execute arbitrary code with the highest privileges on intended targets The post A tale of two zero-days appeared first on WeLiveSecurity

Do you still remember how WannaCryptor ran its – winding – course? It was a tale that revealed a number of intriguing plot lines amid the ransomworm’s numerous twists and turns. The post WannaCryptor: The curious tale of a ravenous cryptoworm appeared first on WeLiveSecurity

The answer may hinge on if you’re a glass-half-full or glass-half-empty kind of person. While we’re at it, how about regulators’ level of preparedness, anyway? The post Are firms and regulators prepared for GDPR? appeared first on WeLiveSecurity

Time does fly! It feels like only yesterday that a new strain of hitherto little-known malware achieved celebrity status among global ransomware campaigns The post 12 months on, what are the lessons learned from WannaCryptor? appeared first on WeLiveSecurity

The infamous outbreak may no longer be causing mayhem worldwide but the threat that enabled it is still very much alive and posing a major threat to unpatched and unprotected systems The post One year later: EternalBlue exploit more popular now than during WannaCryptor outbreak appeared first on WeLiveSecurity

It’s tax season in Canada and scammers are using fake tax refund forms to lure victims into supplying their personal information via phishing pages The post Inside fake Interac transfer and tax refund SMS phishing appeared first on WeLiveSecurity

The importance of providing the best possible after-sales service to customers The post Tech support scams and the call of the void appeared first on WeLiveSecurity

A bug exposed the passwords of an undisclosed number of users in plain text within Twitter’s internal systems The post Twitter advises all users to change passwords after glitch appeared first on WeLiveSecurity

The move is part of the company’s HTTPS-everywhere vision for the internet The post Google rolls out .app domains with built-in HTTPS appeared first on WeLiveSecurity

World Password Day, celebrated on the first Thursday of every May, is a timely reminder of the fact that our passwords are the key to a wealth of personal information about us. The post Recycling is a must, but why would you reuse your password? appeared first on WeLiveSecurity

There is a lot of debate about WiFi speeds and whether they can offer higher potential speeds than a cable connection, but in practice Ethernet connections turn out to be not only faster but also safer. The post WiFi or Ethernet: Which is faster and which is safer? appeared first on WeLiveSecurity

How to use parental control apps to protect children and the fine line that exists between controlling the use of technology and invasion of privacy The post Controlling children’s use of technology: a preventive measure or an invasion of privacy? appeared first on WeLiveSecurity

The questionnaire measures a range of personality traits to distinguish people who are more prone to taking the bait than others. The post This test will tell you how likely you are to fall for fraud appeared first on WeLiveSecurity

For as little as $15 per month, anyone with a criminal bent could rent the services of webstresser.org to take down a targeted site. The post World’s biggest DDoS marketplace taken down, six suspected admins nabbed appeared first on WeLiveSecurity

ESET’s Senior Security Researcher Stephen Cobb reflects on RSA 2018 and the state of the cybersecurity industry The post RSA 2018: Behind the lines appeared first on WeLiveSecurity

ESET’s Global Security Evangelist Tony Anscombe expands on his theory The post Is “Malware of Mass Disruption” the WMD of the future? Insights from the stage at RSA 2018 appeared first on WeLiveSecurity

Zebrocy heavily used by the Sednit group over last two years The post Sednit update: Analysis of Zebrocy appeared first on WeLiveSecurity

Social engineering attacks that involve pretexting nearly tripled on an annual basis while phishing simulations show that curiosity gets the better of 4% of people. The post Ransomware runs rampant in 2017, Verizon report finds appeared first on WeLiveSecurity

IoT security may have finally turned the corner towards a more secure future. The post RSA 2018: IoT security comes of age appeared first on WeLiveSecurity

Some aspects of online tracking go beyond just website analytics The post What’s the deal with session-replay scripts? appeared first on WeLiveSecurity

The challenges facing critical infrastructure systems The post RSA 2018: Hacking the grid appeared first on WeLiveSecurity

Simply throwing more staff at the patching problem won’t cut it, a study suggests. The post Rough patch, or how to shut the window of (unpatched) opportunity appeared first on WeLiveSecurity

Securely keeping track of data and security applications The post RSA 2018: Untangling the enterprise security mess appeared first on WeLiveSecurity

Can the electoral processes be protected? The post Trends 2018: Democracy hack appeared first on WeLiveSecurity

An interview with ESET’s Lukáš Štefanko on the thin line between what deserves the name “security app” and what can be called fake. The post Fake or not fake – that is the question appeared first on WeLiveSecurity

As Internet crime knows no borders, mutual legal assistance involving various nations and, by extension, requests for extraditing suspected cyber-offenders are sometimes part and parcel of prosecution efforts. The post Quarterly cybercrime digest: Extraditions and more appeared first on WeLiveSecurity

The long arm of the law caught up with a number of cybercriminals in the first three months of this year. The post Quarterly cybercrime digest: Sentencing appeared first on WeLiveSecurity

Unlike its much more malicious counterparts, this ransomware has a rather benign demand. It also provides two curious ways of recovering one’s files. The post This ransomware wants you to play, not pay appeared first on WeLiveSecurity

A closer look at Anti-Malware tests and the somewhat unreliable nature of the process. The post Anti-Malware testing needs standards, and testers need to adopt them appeared first on WeLiveSecurity

In Part 1, our roundup of some of the most notable law enforcement actions against computer crime in the first quarter of 2018 will focus on arrests and charges involving suspected cyber-crooks. The post Quarterly cybercrime digest: Part 1 appeared first on WeLiveSecurity

Criminals have devised a new scheme that aims to drain the bank accounts of large corporations. The post Fraudsters intercept corporate debit cards and swap out chips in new scam appeared first on WeLiveSecurity

Hackers have managed to deface an array of popular YouTube music videos, changing titles and thumbnail images. The post The world’s most popular YouTube video has been hacked appeared first on WeLiveSecurity

ESET sat down with Tony Anscombe, Global Security Evangelist and Industry Ambassador, to talk about RSA 2018, his talk at the conference, and what to expect. The post Looking ahead to RSA 2018: An interview with ESET Security Evangelist Tony Anscombe appeared first on WeLiveSecurity

The 2016 compromise of the league’s Twitter account is one of a number of high-profile social media hijackings. The post Hacker who broke into NFL’s Twitter account to spread death hoax learns his punishment appeared first on WeLiveSecurity

Most of the White House’s email domains have yet to deploy an email authentication protocol known as DMARC that is designed to reduce the risk of attackers impersonating legitimate email addresses for distributing spam or phishing messages. The post Study: White House email domains at risk of being misused for phishing scams appeared first on […]

Cybercriminals are believed to have stolen information for more than five million credit and debit cards that shoppers had used at dozens of Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores mainly in the United States between May 2017 and March 2018. The post Saks and Lord & Taylor stores suffer data […]

ESET researchers have analyzed a newly discovered set of apps on Google Play, Google’s official Android app store, that pose as security applications. Instead of security, all they provide is unwanted ads and ineffective pseudo-security. The post Beware ad slingers thinly disguised as security apps appeared first on WeLiveSecurity

The tech giant is taking the measure after a rise in malicious browser extensions that mine digital money by hijacking the processing power of users’ computers. The clampdown follows Google’s recent move to stop serving any and all adverts promoting virtual currencies and initial coin offerings. The post Google banishes cryptocurrency mining extensions from Chrome […]

Implementing the five actions described in this article can help reduce your organization’s cyber risk and bolster its security defenses The post The 5 IT security actions to take now based on 2018 Trends appeared first on WeLiveSecurity

The Lazarus Group gained notoriety especially after cyber-sabotage against Sony Pictures Entertainment in 2014. Fast forward to late 2017 and the group continues to deploy its malicious tools, including disk-wiping malware known as KillDisk, to attack a number of targets. The post Lazarus KillDisks Central American casino appeared first on WeLiveSecurity

The update plugs a security hole that exposes a million Drupal websites to attacks The post Drupal releases patch fixing “highly critical” flaw appeared first on WeLiveSecurity

The notorious ransomware prompted fears that aircraft production could be impacted The post WannaCryptor said to reappear, hitting Boeing’s computers appeared first on WeLiveSecurity

The game was uploaded to Google Play and attempted to trick users into unwittingly signing up for a weekly paid subscription The post Pingu Cleans Up: Subscription scam on Google Play appeared first on WeLiveSecurity

As World Backup Day reminds us, robust backups are integral to healthy information security practices of any organization. This is doubly true for those operating in critical sectors. The post World Backup Day: Banks having each other’s back appeared first on WeLiveSecurity

World Backup Day, celebrated annually on March 31, is a timely reminder of the importance of taking effective measures that can make all the difference when a data loss incident strikes. It is also a good time to pause and reflect on the rising tide of threats that organizations, notably those operating in critical industries, […]

Bitcoin gets all the press these days when it comes to cryptocurrency but the gap in market capitalization is narrowing. The post Monero cryptocurrency: Malware’s rising star appeared first on WeLiveSecurity

Boobytrapped QR code can trick iOS 11 into taking you to a malicious website The post Be wary when scanning QR codes with iOS 11’s camera app appeared first on WeLiveSecurity

Using the strategies and procedures we present in our paper could help prevent an attacker from taking control of your computer The post The Last Windows XP Security White Paper appeared first on WeLiveSecurity

The oil and gas industry is the target of as much as one-half of all cyberattacks in the Middle East The post Oil & gas industry in Middle East found lagging in security appeared first on WeLiveSecurity

ATM jackpot gang is thought to have infiltrated over 100 financial firms in 40 countries costing banks more than one billion dollars. The post Police arrest members of cybercrime gang appeared first on WeLiveSecurity

WeLiveSecurity sat down with David Harley to get a better understanding of Critical Infrastructure and the role he has played in the area throughout his career. The post Critical Infrastructure Interview with David Harley appeared first on WeLiveSecurity

City officials confirm that Atlanta is dealing with a cyberattack that has locked down some internal systems and is holding them hostage using ransomware The post City of Atlanta computers held hostage in ransomware attack appeared first on WeLiveSecurity

Latest ESET research strongly suggests that Glupteba is no longer tied to the infamous Operation Windigo. The post Glupteba is no longer part of Windigo appeared first on WeLiveSecurity

The research confirmed that the more time the users spent on pirate sites the higher the likelihood that some type of malware would compromise their computers. The post Pirate websites expose users to more malware, study finds appeared first on WeLiveSecurity

The lottery’s operator has found that attackers probably used an automated method known as ‘credential stuffing’ to access up to 150 customer accounts. The post UK’s National Lottery urges millions of players to change their passwords appeared first on WeLiveSecurity

Malware in the official Google store never stops appearing. For cybercriminals, sneaking their malicious applications into the marketplace of genuine apps is a huge victory. The post Tricks that cybercriminals use to hide in your phone appeared first on WeLiveSecurity

The report also sheds light on how not to go about attracting new hires. Vague and inaccurate job descriptions along with job postings that include insufficient qualifications were found to top the list of turnoffs for many jobseekers The post Employers’ best bet for appealing to security pros? Value their opinions appeared first on WeLiveSecurity

Diverse background can contribute to your organization’s security. Here are some tips to get more diversity in security perspectives. The post How diversity in cybersecurity contributes to your company appeared first on WeLiveSecurity

The latest episode of this series marks the halfway point in the third season and, in addition to some amazing camerawork there are several examples of actions related to IT security that crop up throughout the episode. The post Mr. Robot S03E05: A Runtime Error, Credential Theft and New Easter Eggs appeared first on WeLiveSecurity

ESET researchers dicovered that Trojanized applications used to steal bitcoin were hosted inadvertently by the popular website download.cnet.com. The post Dangerous malware stealing bitcoin hosted on Download.com for years appeared first on WeLiveSecurity

The attack itself unfolded within the span of two minutes on March 7. Hackers made a flurry of automated transactions that involved the digital currencies Viacoin (VIA) and Bitcoin (BTC). The post Cryptocurrency exchange announces bounty on hackers appeared first on WeLiveSecurity

To smuggle the backdoor onto a targeted machine, the group uses a two-stage attack whereby a dropper package first gains a foothold on the system and sets the stage for the backdoor itself. This process involves some trickery commonly associated with targeted operations of this kind. The post OceanLotus ships new backdoor using old tricks […]

Since being founded in 2003, the Italian spyware vendor Hacking Team gained notoriety for selling surveillance tools to governments and their agencies across the world. The capabilities of its flagship product, the Remote Control System (RCS), include extracting files from a targeted device, intercepting emails and instant messaging, as well as remotely activating a device’s […]

The problem was particularly acute among provider organizations, as opposed to payer organizations (21% vs. 12%). Also, and perhaps counterintuitively, staff with more frequent cybersecurity training were more inclined to such practices. The post One in five healthcare employees willing to sell patient data, study finds appeared first on WeLiveSecurity

DDoS mitigation service Arbor Networks has announced that an undisclosed US company has suffered an attack fueled by internet-facing Memcached servers that clocked in at 1.7 terabits per second (Tbps), beating the previous record of 1.35 Tbps. The post New DDoS attack method breaks record again, adds extortion appeared first on WeLiveSecurity

While Denial of Service attacks amplified by the use of networks of bot-compromised PCs were becoming a notable problem by the turn of the century, DDoS extortion threats have accelerated in parallel (if less dramatically) with the rise in ransomware in the past few years. The post Trends 2018: The ransomware revolution appeared first on […]

Tools for mining cryptocurrencies also fall into this category, as in many cases the websites cannot warn users since they have been compromised themselves, hence even the administrators may not be aware that they are contributing to mining for the benefit of an attacker. The post Cryptojacking: the result of the “cryptocurrency rush” appeared first […]

More than three dozen cybercrime and digital forensics experts from 23 countries have investigated a simulated attack on a bank that had been carried out through an IoT device. The post Global police test their cyber-chops in simulated IoT attack appeared first on WeLiveSecurity

At its peak, inbound traffic reached a staggering 1.35 terabits per second (Tbps), outflanking the previously record-setting assault of 1 Tbps at French web hosting provider OVH in September 2016. The post GitHub knocked briefly offline by biggest DDoS attack ever appeared first on WeLiveSecurity

The experts urge policy-makers to work closely with technical researchers, computer scientists and the cybersecurity community to investigate, understand and prepare for possible malicious uses of AI. The post The rise of AI needs to be controlled, report warns appeared first on WeLiveSecurity

The big challenge with IoT devices is that they are all different: Each manufacturer has its own firmware, uses different protocols, and designs its own architecture. So, the first step before carrying out any analysis is to understand the architecture, find out what components are involved, and how they interact and communicate among themselves. The […]

If we look back at previous incarnations of mobile networks, 1G, 2G and so on, there have been major changes to the technology. The next generation, 5G, delivers, greater speed and lower latency, but also has the advantage of being able to connect many more devices concurrently. The post Mobile World Congress: Introducing 5G appeared […]

This document, which is described by its authors as a “real white paper on cyber-defense”, is divided into three parts, followed by approximately 20 priority recommendations summarizing the central elements of the document. The post Major reform of cybersecurity policies in France appeared first on WeLiveSecurity

The blinding server randomly adds some nonsense code to every webpage. This ‘code obfuscation’, according to the academics, has no effect on what the actual page looks like, but it drastically changes the appearance of the underlying source file. The post Researchers unveil Veil to make ‘private browsing more private’ appeared first on WeLiveSecurity

The recent rise in cryptocurrency scams appearing on the Android platform in disguise has shown that such incidents are not exclusive to PCs and also highlight the importance of knowing what to look out for so you do not unintentionally take part. The post Cryptocurrency scams on Android: do you know what to watch out […]

Bots that traverse the internet on behalf of their human operators can fulfill both legitimate and malicious automated tasks. Statistics indicate that bot-driven internet traffic, by helper and harmful bots combined, surpasses human traffic. The post Over 40% of online login attempts are attackers trying to invade accounts appeared first on WeLiveSecurity

The Internet of Things (IoT) can be a network of connected convenience but this should not come at the expense of safeguarding your privacy and the personal data that connected devices collect and share. The post Privacy by Design: Can you create a safe smart home? appeared first on WeLiveSecurity

If you get sick of shopping sites sending you “I see you stared at this item, here’s some similar stuff” messages, you may be able to modify your subscriptions or notifications to make this stop. The post Six tips to help you avoid targeted marketing appeared first on WeLiveSecurity

Young people were singled out as increasingly likely victims of internet-borne fraud, including because of their penchant for liberal sharing of personal information. The post Survey shows sloppy password habits among young Brits appeared first on WeLiveSecurity

A number of text-based apps crashed, became unresponsive or entered an endless bootloop when attempting to show the otherwise little-used character from a language that is spoken by some 75 million people. The post Apple defuses ‘text bomb’ bug appeared first on WeLiveSecurity

A further breakdown of the overall figures shows that, in all, the actual cost hinges on a number of variables. The factors that enter heavily into the equation include attack types and their frequency, along with the organization’s size and even the country in which an organization is based. The post Cybercrime weighs most heavily […]

This hack is said to be reminiscent of a particularly brazen bank cyber-heist from February 2016, in which hackers successfully pilfered $81 million from the account of the central bank of Bangladesh at the Federal Reserve Bank of New York. The post Millions bagged in two bank cyber-heists appeared first on WeLiveSecurity

The vulnerability of critical infrastructure, including energy grids, to cyberattacks has been a growing concern worldwide. Many nations have been scrambling to improve their defenses vis-à-vis threats faced by services that are critical to the continuity of our daily lives. The post US forms dedicated office to help avert cyberattacks at infrastructure appeared first on […]

A record-high proportion of organizations worldwide (67%) said that they had been breached at some point, up from 56% in the report’s previous edition. The post Concerns about data breaches hitting all-time high appeared first on WeLiveSecurity

Ransomware in 2017 saw users and businesses across the globe trying to cope with campaigns such as Petya and WannaCryptor. Not to be outdone, Android ransomware had a year full of innovative infiltration and rougher extortion as highlighted by the latest ESET research whitepaper. The post Android ransomware in 2017: Innovative infiltration and rougher extortion […]

This week saw the second Tuesday of the month, and everyone who is responsible for protecting Windows computers knows what that means: another bundle of security patches have been released by Microsoft. The post Patch now! Microsoft fixes over 50 serious security flaws appeared first on WeLiveSecurity

Smart TVs afford us the opportunity to use them for purposes that are more commonly associated with computers. In fact, that’s what these TVs have become – internet-connected ‘computers’, much like mobile phones. It would no doubt help if we thought of them as such and treated them accordingly. The post How safe are you […]