Patchwork cyberespionage group expands targets from governments to wide range of industries

Symantec finds that Patchwork now targets a variety of industries in the US, China, Japan, South East Asia, and the UK. Twitter Card Style:  summary The Patchwork attack group has been targeting more than just government-associated organizations. Our research into the group found that it’s been attacking a broad range of industries, including aviation, broadcasting,…

Read More

Tinder safe dating spam uses safety to scam users out of money

Scammers drive users to fake verification site that signs them up to adult webcam and erotic video websites. Twitter Card Style:  summary In recent weeks, we have noticed spam activity on Tinder claiming to promote safety in online dating in messages to users. This is used as a lure to funnel affiliate money into the…

Read More

Malicious macros arrive in phishing emails, steal banking information

Malicious macros made a comeback in 2015 to deliver malware. Now we’re seeing phishing emails use macros in Excel attachments to steal sensitive banking details. Twitter Card Style:  summary In 2015, we saw malicious Microsoft Office macros return with a vengeance, delivering a plethora of threats ranging from ransomware to banking Trojans. Now, we’ve found…

Read More

Android banking malware blocks victims’ outgoing calls to customer service

New Android.Fakebank variants intercept calls to banks’ customer care centers to stop victims from cancelling their stolen payment cards. Twitter Card Style:  summary In March 2016, newer variants of the Android.Fakebank.B family arrived with call-barring functionality. The feature aims to stop customers of Russian and South Korean banks from cancelling payment cards that the malware…

Read More

Billion-dollar scams: The numbers behind BEC fraud

More than 400 companies are targeted with BEC scams every day. Find out more and learn how to stay protected. Twitter Card Style:  summary_large_image Business email compromise (BEC), or CEO fraud, continues to be the bane of companies in 2016. BEC scams are low-tech financial fraud in which spoofed emails from CEOs are sent to…

Read More

Latest Intelligence for June 2016

Our latest intelligence reveals nearly a 30 percentage point drop in web attacks using Angler and a 20 percentage point increase in Manual Sharing social media scams. Twitter Card Style:  summary The Latest Intelligence page has been refreshed through June 2016, providing the most up-to-date analysis of cybersecurity threats, trends, and insights concerning malware, spam,…

Read More

TA16-187A: Symantec and Norton Security Products Contain Critical Vulnerabilities

Original release date: July 05, 2016 Systems Affected All Symantec and Norton branded antivirus products Overview Symantec and Norton branded antivirus products contain multiple vulnerabilities. Some of these products are in widespread use throughout government and industry. Exploitation of these vulnerabilities could allow a remote attacker to take control of an affected system. Description The…

Read More