Malware, Report and Social - Information Technology Zone

IBM X-Force Report: Grandoreiro Malware Targets More Than 1,500 Banks in 60 Countries

Tech Republic Security

MAY 23, 2024

Find out how Grandoreiro banking trojan campaigns work and the countries targeted, as well as how to mitigate this malware threat.

Malware

Malware Banking IBM Report

The latest trends in the threat landscape

CIO Business Intelligence

NOVEMBER 1, 2024

Each quarter HP’s security experts highlight notable malware campaigns, trends and techniques identified by HP Wolf Security. Social engineering attacks Social engineering attacks, especially cybercriminals targeting enterprises with fake overdue invoices, continued to be a big endpoint threat in Q1.

Trends

Trends HP Malware Enterprise

Chinese cyber espionage growing across all industry sectors

CIO Business Intelligence

MARCH 4, 2025

Throughout 2024, China-nexus adversaries demonstrated increasingly bold targeting, stealthier tactics, and more specialized operations, CrowdStrike stated in its 2025 Global Threat Report. Vault Panda has used many malware families shared by Chinese threat actors, including KEYPLUG, Winnti, Melofee, HelloBot, and ShadowPad.

Industry

Industry Malware Telecommunications Groups

Webinars

How to Start Virtual Care the Right Way: A Proven Roadmap for 2025 and Beyond

MORE WEBINARS

CrowdStrike 2024 Global Threat Report: 6 Key Takeaways

Tech Republic Security

FEBRUARY 26, 2024

Identity-based and social engineering attacks still take center stage, according to the CrowdStrike 2024 Global Threat Report.

Report

Report Engineering Social Malware

DeepSeek and AI-Generated Malware Pose New Danger for Cybersecurity

SecureWorld News

MARCH 13, 2025

A recent report from Tenable highlights how DeepSeek R1, an open-source AI model, can generate rudimentary malware, including keyloggers and ransomware. While the AI-generated malware required manual debugging to function properly, its mere existence signals an urgent need for security teams to adapt their defenses.

Malware

Malware Security Tools Report

Human firewalls: The first line of defense against cyber threats in 2025

CIO Business Intelligence

MARCH 14, 2025

A human firewall is a collective effort of individuals within an organization that fights and wards off cybersecurity threats (such as phishing and ransomware), especially ones that use social engineering. In the past few months, infostealer malware has gained ground.

Firewall

Firewall Malware Training Security

Russia's COLDRIVER Targets Western Entities with 'LOSTKEYS' Malware

SecureWorld News

MAY 9, 2025

Google's Threat Intelligence Group (GTIG) has identified a new malware strain, dubbed "LOSTKEYS," attributed to the Russian state-sponsored hacking group COLDRIVER. The introduction of LOSTKEYS signifies a strategic shift towards deploying malware for direct data exfiltration. Cedric Leighton , CNN Military Analyst; U.S.

Malware

Malware Government Social Engineering

Beyond the inbox: ThreatLabz 2025 Phishing Report reveals how phishing is evolving in the age of genAI

CIO Business Intelligence

APRIL 28, 2025

The Zscaler ThreatLabz 2025 Phishing Report dives deep into the rapidly evolving phishing landscape and uncovers the latest trends, including top phishing targets, real-world examples of AI-driven phishing attacks, and actionable best practices to defend against the next wave of AI-powered phishing threats. Download your copy today.

Report

Report Authentication Malware Trends

Chinese cyber espionage growing across all industry sectors

CIO Business Intelligence

MARCH 4, 2025

Throughout 2024, China-nexus adversaries demonstrated increasingly bold targeting, stealthier tactics, and more specialized operations, CrowdStrike stated in its 2025 Global Threat Report. Vault Panda has used many malware families shared by Chinese threat actors, including KEYPLUG, Winnti, Melofee, HelloBot, and ShadowPad.

Industry

Industry Malware Telecommunications Groups

Honeywell Report OT Under Siege

SecureWorld News

JUNE 6, 2025

The Honeywell 2025 Cyber Threat Report delivers a sobering snapshot of today's industrial cybersecurity landscape: cyberattacks targeting operational technology (OT) environments are no longer rare or speculative—they're persistent, highly targeted, and increasingly sophisticated. OT defenders must plan for: Hybrid threats (e.g.,

Report

Report Malware Media Industry

6 of the most effective social engineering techniques

Network World

MARCH 20, 2017

Social engineering is the strongest method of attack against the enterprise’s weakest vulnerability, its people. In 2015, social engineering became the No. 1 method of attack, according to Proofpoint’s 2016 Human Factor Report. These successful social engineering methods often use phishing and malware.

Social

Social Engineering Malware Internet

SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats

CIO Business Intelligence

MARCH 19, 2025

SpyCloud , the leading identity threat protection company, today released its 2025 SpyCloud Annual Identity Exposure Report , highlighting the rise of darknet-exposed identity data as the primary cyber risk facing enterprises today. Additional Report Findings: 17.3

Report

Report Malware Security Data

CrowdStrike Security Report: Generative AI Powers Social Engineering Attacks

Tech Republic

FEBRUARY 27, 2025

Trends in cybersecurity across 2024 showed less malware and phishing, though more social engineering. CrowdStrike offers tips on securing your business.

Engineering

Engineering Social Security Malware

Paris Olympics 2024: Cyber Attackers are Targeting Companies Associated With Games, Report Finds

Tech Republic Security

JUNE 4, 2024

Organisations providing services related to the Paris Olympics 2024 have an increased risk of cyber attack, a new study has found.

Report

Report Company Study Malware

FBI Provides An Update On #SonyHack Investigation Including Some Tech Details On Attribution

CTOvision

DECEMBER 19, 2014

As for me, the most important thing the FBI report tells us all is that organizations should take steps now to enhance their defense. Here is what the FBI had to report : Update on Sony Investigation. Sony reported this incident within hours, which is what the FBI hopes all companies will do when facing a cyber attack.

Malware

Malware Analysis Government CTO

Omni Hotels was hit by point-of-sale malware

Network World

JULY 10, 2016

Omni Hotels & Resorts has reported that point-of-sale systems at some of its properties were hit by malware targeting payment card information. The malware was designed to collect certain payment card information, including cardholder name, credit/debit card number, security code and expiration date,” Omni said. “The

Hotels

Hotels Malware Retail System

3 ways to deter phishing attacks in 2023

CIO Business Intelligence

OCTOBER 20, 2022

In fact, CIO has reported that it takes only a few minutes for experienced hackers to set up a social engineering attack against enterprises (and their managed service providers) that consider themselves to be secure and protected. Deploy email authentication standards on enterprise email servers to check and verify inbound emails.

Training

Training Banking Social Malware

Facebook, LinkedIn, Twitter: The New Cyberweapons Of Choice

Forrester IT

MAY 18, 2016

New social media scams and marketing #fails are common fodder for water cooler banter today - even a recent episode of HBO's Veep ran a joke where the President blames a Chinese cyberattack for sending an ill-advised tweet. But social media cybersecurity issues are far from a laughing matter, and it's time we all take notice.

Media

Media Social Malware Engineering

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

SecureWorld News

FEBRUARY 15, 2024

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Malware

Malware Authentication Mobile Engineering

Google's AI Trends Report: Key Insights and Cybersecurity Implications

SecureWorld News

FEBRUARY 25, 2025

Google's latest AI Trends report highlights emerging AI applications, challenges, and security implications, providing valuable insights for organizations looking to integrate AI safely and responsibly. One of the report's most pressing concerns is the role of Generative AI in social engineering attacks.

Trends

Trends Report Google Artificial Intelligence

Don’t gamble with your identity verification practices

CIO Business Intelligence

OCTOBER 16, 2023

I also emphasized that companies need to urgently review their employee access protocol, writing that companies must “ make it a point to do continuous employee training to help your teams avoid being duped by phishing and malware tactics.” According to reports, MGM and Caesars were both customers of identity management company Okta.

Authentication

Authentication Social Engineering Security

This Steam game is full of malware: Did you download it?

Dataconomy

FEBRUARY 14, 2025

The game was designed to contain malware that could steal users’ browser cookies and was available for at least a week before Valve removed it from its storefront and alerted users about potential risks to their PCs. Lazzzy.gen, a type of malware aimed at stealing browser cookies.

Malware

Malware Advertising Software Software

How Security Teams Collect the Data They Need for Threat Intelligence

SecureWorld News

APRIL 14, 2025

With these insights, security personnel know which attack vectors to watch more closely, how to orchestrate the defenses, and what new phishing and social engineering trends to warn employees about. They amass data from websites, social media networks, news sources, public databases, and domain registries.

Security

Security Data Malware Open Source

Fake ChatGPT services are being used as lures to spread malware on Facebook

TechSpot

MAY 4, 2023

Facebook parent Meta published its latest threat research and technical analysis into persistent malware campaigns this week. Read Entire Article

Malware

Malware Analysis Media Social

Hackers Exploit Zoom's Remote Control Feature in Cryptocurrency Heists

SecureWorld News

APRIL 22, 2025

Once control is granted, the attacker can secretly install malware, including infostealers and remote access trojans (RATs), onto the victim's machine. The malware then exfiltrates sensitive data, including cryptocurrency wallet credentials, personal information, and private keys.

Malware

Malware Groups Social Engineering

The hidden costs of your helpdesk

CIO Business Intelligence

AUGUST 29, 2024

Text messages can be intercepted via malware such as SMS trojan , SIM swapping (an account breaching technique in which fraudsters pay wireless carrier employees to swap a customer’s SIM for one controlled by the threat actor), and OTP interception bots , which can access customers’ one-time-passwords.

Authentication

Authentication Social Security Engineering

Cisco Talos: Top Ransomware TTPs Exposed

Tech Republic Security

JULY 10, 2024

Read about the new Cisco Talos report on the top ransomware groups’ techniques and learn how to mitigate this cybersecurity risk. Cisco Talos observed the TTPs used by 14 of the most prevalent ransomware groups based on their volume of attack, impact to customers and atypical behavior.

Groups

Groups Report How To Malware

Flexible-Ferret malware targets Mac users by doding XProtect measures

Dataconomy

FEBRUARY 5, 2025

Flexible-Ferret malware variant evades Apple’s XProtect measures This detection-resistant variant was identified by researchers at SentinelOne, who noted its ability to bypass the recent XProtect signature update intended to block Ferret infections.

Malware

Malware Apple Research Operating Systems

The changing face of cybersecurity threats in 2023

CIO Business Intelligence

SEPTEMBER 29, 2023

government and the companies that are best prepared to provide safe-by-default solutions to uplift the whole ecosystem,” says a report published by the Homeland Security Department’s Cyber Safety Review Board. “Organizations must act now to protect themselves, and the Board identified tangible ways to do so, with the help of the U.S.

Network

Network Authentication Firewall Malware

Copilot: an indispensable tool for banking security teams

CIO Business Intelligence

FEBRUARY 22, 2024

A report by the Bank for International Settlements singled out the growth of cloud-based services and remote working as two of the primary drivers behind the heightened risk. These can be via social engineering, known as ‘hacking the human’, or via unsecured technology like apps, data and networks. billion by 2032.

Banking

Banking Tools Security Malware

Google warns of ‘novel social engineering method’ used to hack security researchers

The Verge

JANUARY 26, 2021

Government-backed hackers based in North Korea are targeting individual security researchers through a number of means including a “novel social engineering method,” Google’s Threat Analysis Group is reporting.

Research

Research Social Engineering Google

Information Stealing Malware on the Rise, Uptycs Study Shows

SecureWorld News

JULY 27, 2023

A new study from Uptycs has uncovered an increase in the distribution of information stealing malware. The 17-page report has a wealth of information, including the impact of stealers, the lifecycle of a stealer, the workflow of a stealer, and statistics around the stealers trending in 2023.

Malware

Malware Study Linux Spyware

Israel–Iran Conflict Escalates in Cyberspace: Banks and Crypto Hit, Internet Cut

SecureWorld News

JUNE 19, 2025

Monitoring firm NetBlocks reported that Iran's connectivity dropped by more than 97%, effectively severing millions of citizens and businesses from the global internet. Update detection rules for wipers, destructive malware, and insider reconnaissance.

Internet

Internet Banking Disaster Recovery Financial

Game Change: Three Reasons Why #SonyHack Will Change Security

CTOvision

DECEMBER 19, 2014

See the interview here: Tactics Not Malware Are the Story. Most corporate hacks we see are focused on either customer data (credit cards, medical records, social security numbers, passwords, bank account information, email addresses) or company proprietary documents. A defining moment that causes significant change in behavior.

Security

Security Malware Meeting Media

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

SecureWorld News

FEBRUARY 20, 2025

Cybersecurity awareness and incident response Train employees to recognize phishing attempts and social engineering. Report ransomware incidents to the FBI Internet Crime Complaint Center (IC3) , CISA, or MS-ISAC. Deploy endpoint detection and response (EDR) solutions. Develop and test ransomware response plans.

SMB

SMB Security Network Strategy

Teenager Hacks Uber by Social Engineering an Employee

SecureWorld News

SEPTEMBER 17, 2022

The New York Times reports that the individual claiming responsibility for the breach sent pictures of email, cloud storage, and code repositories to some cybersecurity researchers. According to this cyber wonderkid, they used social engineering to pull off the hack. They are openly taunting and mocking @Uber. September 16, 2022.

Engineering

Engineering Social System Security

Whole Foods Supplier United Natural Foods Hit in Cyber Attack

SecureWorld News

JUNE 10, 2025

UNFI has not confirmed whether sensitive data was accessed, what type of malware or attacker group may have been involved, or the timeline of recovery. This suggests that the malware moved more quickly through their network than their attempts to contain the spread.

Retail

Retail Business Continuity Fractional CTO Malware

How to manage cloud exploitation at the edge

CIO Business Intelligence

JULY 17, 2023

According to the 2023 Verizon Data Breach Investigations Report (DBIR), the majority of cyber attacks are led by organized criminals looking to disrupt business and steal data to sell. Malware Distribution: Cloud exploitation can involve hosting or distributing malware through cloud-based platforms or services.

Cloud

Cloud How To Open Source Malware

How TCS is helping to fight financial crime with AI and Microsoft Cloud

CIO Business Intelligence

APRIL 17, 2023

Challenges for fraud risk management Fraud is a big and a worthwhile business for today’s online criminals, who troll the internet and insert data-stealing malware into vulnerable sites and mobile apps. AI can also enhance existing software, such as alerting systems, which often generate many false positives.

Financial

Financial Cloud Microsoft Banking

Report Reveals Top Cyber Threats, Trends of 2023 First Half

SecureWorld News

JUNE 13, 2023

Critical Start today released its biannual Cyber Intelligence Report, featuring the top threats observed in the first half of 2023 and emerging cybersecurity trends impacting the healthcare, financial services, and state and local government industries. The new Beep malware is top of mind for organizations and individuals.

Trends

Trends Report Malware Linux

Google Cloud’s Cybersecurity Trends to Watch in 2024 Include Generative AI-Based Attacks

Tech Republic Big Data

NOVEMBER 9, 2023

A November report from Google Cloud details possible nation-state malware tactics in 2024 and new angles of cyberattacks.

Google

Google Malware Trends Cloud

‘Sideloading is a cyber criminal’s best friend,’ according to Apple’s software chief

The Verge

NOVEMBER 3, 2021

“Sideloading is a cyber criminal’s best friend and requiring that on iPhone would be a gold rush for the malware industry,” according to Apple senior vice president Craig Federighi, who delivered a dramatic speech at Web Summit 2021 declaiming the security risks if Apple were required to let users sideload apps.

Software

Software Software Malware Apple

ThreatConnect In The News: Washington Post Examines Link Between China and Anthem Attack

CTOvision

FEBRUARY 27, 2015

The Washington Post published a report focused heavily on ThreatConnect contributions to a better understanding of the Anthem hack titled: Security firm finds link between China and Anthem hack. Malicious software used in the Anthem hack conclusively matches malware that was used to target a small U.S.

Malware

Malware Big Data Insurance Analysis

Is your coworker a North Korean hacker? How AI impersonation is compromising the workforce

CIO Business Intelligence

SEPTEMBER 30, 2024

October 2023: Additional FBI guidance cites red flags for deepfake job candidates, such as an unwillingness to appear on camera and social media profiles that don’t match the person’s resume. One executive reports having stopped “over 50 candidates that were North Korean spies.”

Journal

Journal Survey Tools Security

IBM X-Force Report: Grandoreiro Malware Targets More Than 1,500 Banks in 60 Countries

The latest trends in the threat landscape

Webinars

Trending Sources

Chinese cyber espionage growing across all industry sectors

Webinars

CrowdStrike 2024 Global Threat Report: 6 Key Takeaways

DeepSeek and AI-Generated Malware Pose New Danger for Cybersecurity

Human firewalls: The first line of defense against cyber threats in 2025

Russia's COLDRIVER Targets Western Entities with 'LOSTKEYS' Malware

Beyond the inbox: ThreatLabz 2025 Phishing Report reveals how phishing is evolving in the age of genAI

Chinese cyber espionage growing across all industry sectors

Honeywell Report OT Under Siege

6 of the most effective social engineering techniques

SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats

CrowdStrike Security Report: Generative AI Powers Social Engineering Attacks

Paris Olympics 2024: Cyber Attackers are Targeting Companies Associated With Games, Report Finds

FBI Provides An Update On #SonyHack Investigation Including Some Tech Details On Attribution

Omni Hotels was hit by point-of-sale malware

3 ways to deter phishing attacks in 2023

Facebook, LinkedIn, Twitter: The New Cyberweapons Of Choice

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

Google's AI Trends Report: Key Insights and Cybersecurity Implications

Don’t gamble with your identity verification practices

This Steam game is full of malware: Did you download it?

How Security Teams Collect the Data They Need for Threat Intelligence

Fake ChatGPT services are being used as lures to spread malware on Facebook

Hackers Exploit Zoom's Remote Control Feature in Cryptocurrency Heists

The hidden costs of your helpdesk

Cisco Talos: Top Ransomware TTPs Exposed

Flexible-Ferret malware targets Mac users by doding XProtect measures

The changing face of cybersecurity threats in 2023

Copilot: an indispensable tool for banking security teams

Google warns of ‘novel social engineering method’ used to hack security researchers

Information Stealing Malware on the Rise, Uptycs Study Shows

Israel–Iran Conflict Escalates in Cyberspace: Banks and Crypto Hit, Internet Cut

Game Change: Three Reasons Why #SonyHack Will Change Security

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

Teenager Hacks Uber by Social Engineering an Employee

Whole Foods Supplier United Natural Foods Hit in Cyber Attack

How to manage cloud exploitation at the edge

How TCS is helping to fight financial crime with AI and Microsoft Cloud

Report Reveals Top Cyber Threats, Trends of 2023 First Half

Google Cloud’s Cybersecurity Trends to Watch in 2024 Include Generative AI-Based Attacks

‘Sideloading is a cyber criminal’s best friend,’ according to Apple’s software chief

ThreatConnect In The News: Washington Post Examines Link Between China and Anthem Attack

Is your coworker a North Korean hacker? How AI impersonation is compromising the workforce

Stay Connected