News Coverage

But we are all human, and the most technically savvy of us can get caught out from time to time. As Fabian Libeau, VP for EMEA at RiskIQ, said: “The critical aspect in all social engineering scams is that the intended victim believes the scammer to be legitimate, and as people have become able to spot the most obvious phishing emails, we are increasingly seeing time being spent on crafting well-written and seemingly authentic messages requesting reasonable actions. This means that even if you’re relatively well informed, it’s becoming harder to single out, especially when criminals impersonate.”

It’s been reported that hackers are using newsletter subscription forms to spread links to a phishing website on behalf of well-known international companies such as Audi, Austrian Airlines and S-Bahn Berlin. This, coupled with recent warnings in the US that attackers are using phishing tactics to lure victims to open malicious documents or submit sensitive information when filing their taxes, it is clear that phishing campaigns are back in the spotlight. Fabian Libeau, VP for EMEA at RiskIQ, comments on the rise of such attacks and what organisations can do to safeguard against them:

The following month, cyber-security firm RiskIQ warned the TM hack was the “tip of the iceberg”, noting that the Ibenta plug-in also ran on hundreds of other ecommerce sites.

Also in this quarters Trends report: APWG contributor Axur documented how phishers in South America offered Black Friday deals to their fellow criminals; and APWG contributor RiskIQ analyzed where phishing falls in the domain name space.

“Android apps like these are notorious for simply pushing more content on phones, but even more so they are simply used to gather data from the phone,” says Yonathan Klijnsma, head threat researcher at security intelligence firm RiskIQ. “This ranges from basic information like the model of the phones, towards live GPS polling, phone numbers, and any other personally identifiable information up for grabs.”

At the beginning of the week I told you about hackers compromising seven e-commerce web sites to skim off credit card information. Well, security vendor RiskIQ said Thursday it has discovered websites of two more online companies that have been hit: Bedding retailers MyPillow.com and Amerisleep.

Researchers from security firm RiskIQ have recently analyzed two attacks attributed to Magecart that were discovered in the company’s historical dataset obtained from crawled websites. Both of those attacks highlight how these attackers are adapting to defenses change their tactics accordingly.

The Magecart group — known for its notorious credit card skimming attacks, makes headlines again. This time, it has found targeting websites of mattress companies MyPillow & Amerisleep. The security incident was uncovered and detailed by Yonathan Klijnsma of RiskIQ. With its continuously evolving tactics, the group has slowly been rising to dominate the cyberspace in 2019.

Security experts at riskIQ revealed today that another two organizations were victims of Magecart crime gang, the bedding retailers MyPillow and Amerisleep.