Threat Intel - Key Cybersecurity Events from Last Week
Basically, there were many cybersecurity issues last week that you need to know about.
Last week, cybersecurity saw urgent updates from Google and Apple. Users were targeted by scams and phishing attacks. Stay informed to protect your devices and data.
What Happened
Last week was packed with significant cybersecurity events. Google issued a critical update for Chrome to patch two zero-day vulnerabilities that were under active attack. This means hackers were already exploiting these weaknesses, making it urgent for users to update their browsers immediately.
In addition, Apple rolled out security patches for older iOS versions to fix flaws exploited by the Coruna exploit kit. This exploit kit is known for targeting vulnerabilities to install malicious software on devices. Keeping your devices up to date is essential to protect against such threats.
Who's Being Targeted
Various groups are at risk, including everyday users of popular platforms like Google Chrome and iOS. The scams reported also targeted individuals through phishing emails and fake airdrops. For instance, attackers impersonated Temu in a ClickFix scam, tricking users into running malware themselves.
Moreover, phishing campaigns targeting Signal and WhatsApp accounts were reported, indicating that attackers are increasingly focusing on messaging platforms. This highlights the broader trend of cybercriminals adapting their tactics to exploit popular services.
Tactics & Techniques
The tactics used by attackers include impersonation and exploiting known vulnerabilities. For example, the scammers used fake renewal notices for Malwarebytes subscriptions to lure victims. Additionally, they employed an IPv6 trick in phishing emails to disguise scam links, making them appear legitimate.
Another alarming tactic involves sextortion emails that reuse passwords found in disposable inboxes, putting users at risk of blackmail. These methods show how sophisticated and varied cyber threats can be, requiring constant vigilance from users.
Defensive Measures
To protect yourself, it is crucial to stay informed about the latest threats. Regularly update your software, especially browsers and apps, to ensure you have the latest security patches.
Be cautious of unsolicited emails or messages, especially those requesting personal information or urging immediate action. Use tools like Malwarebytes Scam Guard to verify suspicious content. Lastly, consider enabling two-factor authentication on your accounts for an added layer of security. Staying proactive is key in today’s digital landscape.
Malwarebytes Labs