Abnormal Security’s Post

In a recent multi-stage impersonation attack, threat actors posed as the popular streaming service Disney+ with impressive sophistication. What sets this attack apart is the level of personalisation and attention to detail employed by the perpetrators, making it difficult for traditional security solutions and even vigilant individuals to identify it as malicious. A deeper review is provided in this Abnormal Intelligence blog.

I see another common problem here: For some weird reason that I don’t seem to get, IT teams that are setting up the employees’ workstations do not mind to enable the “show file extensions for known file types” that is by default disabled in every windows 10 default configuration (maybe also 11 don’t know for sure). What does this mean? If a user had a text file in the desktop or anywhere named “readme” the file should just say “readme”. But if you enable the option “show file extensions for known file types” the same file would be named readme.txt instead of just readme. In the video’s example we see the “password.txt” is actually an lnk file and not a txt file. So if the “show file extensions for known file types” was enabled on the system the employee would actually see a file named password.txt.lnk and I bet it would be easier for the employee to spot something’s off there. #cybersecurityawareness

Criminals will akways try to be a step ahead of those they are trying to cheat. Everyone in an organization must be on thier toes and aware of the protocols . If anything doesn"t feel right, contact the cyber security team. #cybercrime #cybersecurity #cyberawareness

There's no exhaustion of having new ways to bypass technical and admistrative security controls.. Security Awareness is the first and last line of defence, the achiles heel and also the great Wall! The most important piece. #securityawareness #cybersecurity #informationtechnology

New Blog Alert! Check out our latest post, "Handala’s Wiper Targets Israel," by Mathanraj TK Max Kersten and Tomer Shloman The Handala Hacking Team, targeting Israeli entities with a destructive wiper malware designed to obliterate files. In this blog, we delve into: The Handala Hacking Team's background and previous actions The attack chain and how it unfolded Technical insights into the wiper’s functionality and code reuse Don’t miss this in-depth analysis of a significant cybersecurity #CyberSecurity #ThreatIntelligence #MalwareAnalysis #HandalaHackingTeam #CrowdStrike #FalconAgent

Cyber Security is a Team Effort.

Threat actor group Handala was observed sending lure emails containing malware to Israeli targets following the CrowdStrike outage. The malware is a wiper that has a single purpose: to destroy files on the machine it runs on. Max Kersten, Mathanraj TK, and Tomer Shloman provide the full run-down of Handala’s previous actions, attack chains, and the inner workings of the wiper in the latest blog. ➡️ https://bit.ly/4d0ri2A

Happy #WorldIPDay from the MPA! It's easy to see how protecting intellectual property rights supports creativity. Enjoying your favorite content on legitimate, legal services supports a productive workforce and sustainable economic growth. Learn more about the Alliance for Creativity and Entertainment's work:

📣 Attention #YouTubers and viewers! YouTube is increasingly targeted by cybercriminals for scams and malware distribution. Creators, protect your channels. Viewers, safeguard your devices. Discover how in our new WeLiveSecurity blog! https://lnkd.in/gD8mEc5M #ESET #ProgressProtected #YouTube #OnlineSafety

Happy #WorldIPDay from MPA EMEA! It's easy to see how protecting intellectual property rights supports creativity. Enjoying your favorite content on legitimate, legal services supports a productive workforce and sustainable economic growth. Learn more about the Alliance for Creativity and Entertainment's work: