AuthenticationAttack on Google OAuth using abandoned domains
A vulnerability in Google OAuth allows attackers to access accounts of defunct organizations through abandoned domains.
47 articles
e-mailE-mail attacks on the hotel business
Threat actors are targeting hotel staff with malicious and phishing e-mails.
How cybercriminals disguise URLs
Methods used by attackers to redirect victims to malicious and phishing sites from seemingly safe URLs.
Conversation hijacking and how to deal with it
Cybercriminals can access the e-mails of folks you’re in correspondence with and then try to hijack your conversations.
Microsoft planning to block outdated Exchange servers
Microsoft plans to throttle and block email from vulnerable Exchange servers to Exchange Online.
phishingSharePoint as a phishing tool
Cybercriminals are using hijacked SharePoint servers to send dangerous notifications.
Trojan-stealer discovered in spam mailouts to businesses
Cybercriminals are sending to companies high-quality imitations of business letters with a spy trojan in the attachment.
ILOVEYOU: the virus that loved everyone
We recall the story of the ILOVEYOU worm — one of the most infamous viruses from 22 years ago.
Malware in e-mail on the rise
Malicious spam campaign targeting organizations grows 10-fold in a month, spreads Qbot and Emotet malware.
Password reset notification scam
Anti-phishing lessons: what company employees should know about fake notifications about account security.
employeesHow to stay safe while working with freelancers
Methods of reasonable protection against potential freelancer related cyberthreats.
Common spear-phishing tricks
To be ready for attacks targeting your company, information security officers need to know about received spear-phishing e-mails.
scam
OWOWA malicious IIS module
The malicious Internet Information Services module makes Outlook on the web a cybercriminal tool.
How to protect businesses from phishing
One click on a phishing link can cost a company both money and reputation. Here’s how to protect your company from phishing.
5 reasons not to use work mail for personal matters
Why using a corporate mail account for personal matters is not a good idea
E-mail with a malicious link
Spam and phishing e-mails are not the only threats you might find in your mailbox. Cybercriminals are still using good old links to malware.
Phishing with Google Apps Script
Scammers are using redirects through Google Apps Script to prevent mail servers from blocking phishing links.
Online PDFs for corporate e-mail phishing
Attackers claiming to represent Adobe online services are sending fake notifications to obtain corporate e-mail credentials.