New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware

A new QBot malware campaign is leveraging hijacked business correspondence to trick unsuspecting victims into installing the malware, new findings from Kaspersky reveal. The latest activity, which commenced on April 4, 2023, has primarily targeted users in Germany, Argentina, Italy, Algeria, Spain, the U.S., Russia, France, the U.K., and Morocco. QBot (aka Qakbot or Pinkslipbot) is […]

CERTFR-2023-ACT-017 : Bulletin d’actualité CERTFR-2023-ACT-017 (17 avril 2023)

Ce bulletin d’actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas …

FIN7 and Ex-Conti Cybercrime Gangs Join Forces in Domino Malware Attacks

A new strain of malware developed by threat actors likely affiliated with the FIN7 cybercrime group has been put to use by the members of the now-defunct Conti ransomware gang, indicating collaboration between the two crews. The malware, dubbed Domino, is primarily designed to facilitate follow-on exploitation on compromised systems, including delivering a lesser-known information stealer […]

What’s the Difference Between CSPM & SSPM?

Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) are frequently confused. The similarity of the acronyms notwithstanding, both security solutions focus on securing data in the cloud. In a world where the terms cloud and SaaS are used interchangeably, this confusion is understandable. This confusion, though, is dangerous to organizations that need to secure

LockBit 3.0 : le « ransomware-star » bientôt dans les Mac ?

La découverte d’une variante du ransomware LockBit pour Mac a agité la communauté infosec ce week-end. Que révèle l’analyse ?

IdO non sécurisés : les principaux risques juridiques et de sécurité

Les dispositifs de l’internet des objets (IdO) occupent une place de plus en plus importante dans les entreprises modernes. Ces outils permettent d’optimiser l’expérience des clients, de collecter des données pour la veille économique et d’automatiser les activités quotidiennes.