article thumbnail

Cybercriminals Deliver IRS Tax Scams & Phishing Campaigns By Mimicking Government Vendors

Security Affairs

Cybercriminals are leveraging advanced tactics in their phishing-kits granting them a high delivery success rate of spoofed e-mails which contain malicious attachments right before the end of the 2021 IRS income tax return deadline in the U.S. Easter), that’s why you need to be especially careful during these times. com” domain.

Phishing 327
article thumbnail

New QBot campaign delivered hijacking business correspondence

Security Affairs

The threat actors behind the campaign observed by Kaspersky used e-mail written in different languages, including English, German, Italian, and French. New QBot infection chain “The QBot malware delivery scheme begins with an e-mail letter with a PDF file in the attachment being sent.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

OilRig APT group: the evolution of attack techniques over time

Security Affairs

group_d : from March 2019 to August 2019 The evaluation process would take care of the following Techniques: Delivery , Exploit , Install and Command. Delivery: The main question to try to answer on the delivery stage is: “How does OilRig evolve in threat delivery over time ?” Delivery Technique Over Time.

article thumbnail

Lampion malware v2 February 2020

Security Affairs

Several devices have been infected when the victims open the zip file downloaded from the URL embedded in the malicious email that lures the Portuguese Government Finance & Tax (ATA) , Energias de Portugal (EDP) , and more recently the DPD firm – an international parcel delivery service. Figure 1: Lampion malware email templates.

article thumbnail

Threat Report Portugal: Q4 2021

Security Affairs

Also, campaigns related to the Autoridade Tributária e Aduaneira were observed , using Telegram to notify criminals about new infections. He is also a founding member and Pentester at CSIRT.UBI and founder of the security computer blog seguranca–informatica.pt. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

article thumbnail

GUEST ESSAY: Understanding the security limits of the static and dynamic passwords we rely on

The Last Watchdog

When we sign up for an online account or request resetting a password, we usually receive a new password via e-mail. However, if an attacker is able to intercept and read this e-mail she or he will be able to compromise our account. Multi-channel password delivery systems.

Passwords 232
article thumbnail

How Ursnif Evolves to Keep Threatening Italy

Security Affairs

In our previous post , we enumerated the delivery methods and the principal TTPs of the attackers behind the Ursnif mlaware threat. IQ’,’fIQ’)+’e’+’ra’+’ ‘+’= f’+(“{0}{1}” -f ‘1e’,’ry.’)+’G’+’etR’+’es’+(“{0}{1}” -f ‘pon’,’s’)+(“{1}{2}{0}”-f ‘g’,’e(‘,’);f1e’)+’=’+’L ‘+’Sy’+’st’+’e’+’m’+’.’+’D’+’ra’+(((“{4}{3}{2}{0}{1}”-f’m’,’ap((‘,’t’,’g.Bi’,’win’)))+’L’+’