News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

State of the Phish Report: Enormous ransomware damage
State of the Phish Report: Enormous ransomware damage

The current "State of the Phish" report shows that ransomware attacks pose an increasing threat to German companies. Ransomware attacks wreak havoc. Who Pays the Ransom: Only 4 out of 10 companies get the full data back. That's according to the ninth annual State of the Phish report released today by leading cybersecurity and compliance firm Proofpoint. 85 percent of German companies were affected by a ransomware attack last year. 63 percent of these attacks were successful. Defying ransom: only 41 percent get data back Less than half (41 percent)…

Read more

Huge rise in endpoint ransomware

WatchGuard's Internet Security Report Q4/2022 shows the increase in endpoint ransomware and less network malware. The analysis confirms that encrypted connections have become the method of choice for spreading malware. The latest WatchGuard Internet Security Report (ISR) for the fourth quarter of 2022 shows how massively end devices are the focus of attackers. While the number of malware detected on the network is declining, the researchers at the Threat Lab have seen a surge in ransomware on endpoints - the increase is a staggering 627 percent. Over 600 percent more ransomware…

Read more

Ransomware Report: LockBit in attack mode
Ransomware Report: LockBit in attack mode

LockBit continues to shape the ransomware scene. The ransomware group again tops the list of groups selling ransomware-as-a-service (RaaS). In February 2023, LockBit reported a total of 126 victims on its leak page, according to analysis by Malwarebytes' threat intelligence team. It is not for nothing that the threat intelligence team at Malwarebytes named LockBit as one of the five biggest cyber threats for companies in 2023 in its “2023 State of Malware” report. As early as 2022, LockBit consistently proved to be by far the most active ransomware group. According to Malwarebytes, it was responsible for almost a third of all known…

Read more

3CX Desktop App infected
3CX desktop infected

Security researchers discovered a fraudulent counterfeit of the popular software 3CX Desktop including malware or Trojan, a telephony system based on open standards. You can use it to make calls directly on the desktop with a headset. The Trojan version now discovered contains a malicious DLL file that replaces an original file that comes bundled with the benign version of the application. When the fake application is loaded, the signed 3CX DesktopApp executes the malicious DLL as part of its predefined execution procedure. In this way, the harmless, popular VoIP application turned into a full-fledged malware that connects to third-party servers...

Read more

Cybercrime with ChatGPT
Cybercrime with ChatGPT

With every improvement in ChatGPT, there is growing concern that it could be misused on a large scale, particularly by cybercrime, and that it would greatly increase the online threat situation. The past has shown that technological innovations have always been misused by cybercriminals. This certainly also applies to ChatGPT. All sorts of new uses are being devised for this conversational AI. The writing of applications or articles as well as the use as a search engine. In the latest version even to create images. This has certainly not escaped the notice of the cybercriminals. And that ChatGPT is free and not to use…

Read more

Scam: GPT-4 as bait for phishing
Scam: ChatGPT as bait for phishing

Hoping to capitalize on the massive interest in GPT-4 - ChatGPT's new multimodal model - scammers have launched phishing campaigns via email and Twitter to steal cryptocurrency. A day after the highly anticipated launch of OpenAI's Generative Pre-trained Transformer Version 4 (GPT-4), scammers have jumped on the bandwagon. They have started sending phishing emails and tweeting phishing links to cryptocurrency prospects about a fake OpenAI token. At the time of Tenable's blog post, OpenAI was only offering GPT-4 access to ChatGPT Plus subscribers and developers via its API. The…

Read more

Study: Company data on the dark web – 60 percent affected

As a current study of 26.000 companies and 80 industries shows, data leaks mean that a lot of German company data is available for download or purchase on the dark web. Almost 60 percent of all companies and state institutions are affected. Some companies may not even know this. In their “Darknet Study Germany 2023″, the security researchers from Botiguard from Bavaria looked for companies in the Darknet and for data leaks. The broad study included more than 26.000 companies from 80 industries and categories. The situation picture for Germany is worrying and worse than previously assumed. Germany: situation report worrying...

Read more

Attacks on the supply chain
Attacks on the supply chain

Attackers have always looked for the weakest link in the chain in order to break through a defence. This has not changed in today's highly digitized business world and also includes the supply chain of the supplier industry. Suppliers often have access to their customers' internal systems, and a hack on seemingly insignificant suppliers can mean for hacker groups entry into the network of a global corporation. Attacks via the software supply chain are even more common and have even more dramatic effects. So instead of attacking the targeted company directly, cybercriminals target their software distributors…

Read more

Development 2022: cybercrime, wars, ransomware
Development 2022: cybercrime, wars, ransomware

In its report “2023 State of Malware”, security expert Malwarebytes compiles the developments of the year 2022: Geopolitical cybercrime, ransomware and new authentication technologies in response to many threats. 71 percent of companies worldwide were affected by ransomware in 2022. By the end of November, over 22.500 new vulnerabilities and security gaps had been added to the global database CVE (Common Vulnerabilities and Exposures) - ten percent more than in the previous year. The past year was marked by numerous different cyber attacks. This is the conclusion reached by threat intelligence analysts at Malwarebytes in their report "2023 State of...

Read more

Top malware in Q1-2023: Qbot, Formbook, Emotet
Top malware in Q1-2023: Qbot, Formbook, Emotet

Check Point's Spring 2023 Global Threat Index shows Qbot, Formbook, and Emotet malware as the most threatening, HTTP Headers Remote Code Execution vulnerability on the rise, and retail as an industry most under attack. Check Point has published its Global Threat Index for January 2023. Qbot, a sophisticated Trojan that steals banking information and keystrokes, remains at the top. Emotet slips to third place in Germany. With regard to sectors and areas, retail was attacked in Germany in particular. Maya Horowitz, VP Research at...

Read more