Security Alerts & News
by Tymoteusz A. Góral

History
#835 Amazon users targets of massive Locky spear-phishing campaign
Amazon customers were targeted in a massive spear phishing campaign where recipients received Microsoft Word documents with a macro that triggered downloads of the Locky ransomware. Researchers at Comodo Threat Research Labs say it is one of the largest spam ransomware campaigns this year.

Fatih Orhan, director of technology at Comodo and the Comodo Threat Research Labs, said the attack occurred on May 17 and lasted about 12 hours and is estimated to have pushed out as many as 30 million spam messages purporting to be an update from Amazon on a shipping order. Orhan told Threatpost the spear phishing campaign is notable not just because of its size, but also because the attackers were able to manipulate email header data to trick sender policy framework (SPF) controls on email gateways.
Read more
#838 “Forbidden attack” makes dozens of HTTPS Visa sites vulnerable to tampering
#837 Google's Chrome 51: Less battery drain from video, simpler site logins - plus 42 bug fixes
#836 Symantec: Android threats evolve to handle Marshmallow’s new permission model
#835 Amazon users targets of massive Locky spear-phishing campaign
#834 Virtual assistants such as Amazon's Echo break US child privacy law, experts say
#833 Symantec: SWIFT attackers’ malware linked to more financial attacks
#832 Tor to use never-before-seen distributed RNG to generate truly random numbers
#831 Microsoft may ban your favorite password
#830 US nuclear force 'still uses floppy disks'
#829 SAS: Big data is a big miss when it comes to IoT
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12