social engineering

Phishing

Targeted Attacks Follow Tibetans To The Cloud

In-brief: A report by The Munk Center finds attackers believed to be affiliated with China are shifting tactics as Tibetans and the Tibetan Government in Exile rely more on the cloud to communicate.

Super Cookies, Web Analytics Behind Malicious Profiling

In-brief: FireEye is warning about a sophisticated campaign of online surveillance that combines web “super cookies” and common analytics software to target individuals with links to international diplomacy, the Russian government and the energy sector.

Update: RSA Warns of Supply Chain Attack on Point of Sale Vendors

In-brief: RSA said it detected evidence of a malicious software campaign that targeted employees at point of sale vendors – a possible effort to compromise the PoS supply chain. 

IBM: Dyre Banking Malware Behind Sophisticated Crime Spree

In-brief: IBM researchers say they have seen a spike in malicious activity linked to the Dyre family of malware. Sophisticated attacks on business banking accounts have led to the theft of millions of dollars, IBM says. 

Android SDK Flaw Could Enable Dropbox Data Theft

In-brief: IBM researchers say they discovered a flaw in an SDK from the cloud storage firm Dropbox that could result in Android users accidentally sending their data to a Dropbox account controlled by a malicious actor.