Cofense Phishing Prevention & Email Security Blog

IRS Phishing Email – Up and Coming Phishing Campaign Is Taxing to Users

Telegram Utilized for Harvesting Credentials

Cofense PhishMe: Our FedRAMP Journey

Phish Found in SEG-Protected Environments Week ending February 19, 2021

Phish Found in SEG-Protected Environments Week ending February 12, 2021

Phish Found in Proofpoint-Protected Environments Week ending February 5, 2021

BazarBackdoor’s Stealthy Infiltration Evades Multiple SEGs

Emotet Disrupted but Likely to Return

By Brad Haas, Cofense Threat Intelligence  Background  Originally a banking Trojan, Emotet evolved to become more of a gateway for other malware families such as Ryuk, TrickBot, and QakBot. For the last few years, it has been among the top producers of malicious emails, using innovative and regularly updated techniques. For example, recently it harvested email reply chains from victims, and used those to create effective lures to send to the victims’ contacts. It also uses several tactics to avoid detection, such as delivery via password-protected zip file attachments and hosting itself on a large collection of legitimate but compromised websites. Emotet’s authors have shown remarkable patience and willingness to...

Signature Deadline: The Creation of Panic by Phish

The Ryuk Threat: Why BazarBackdoor Matters Most

GuLoader Rises as a Top Malware Delivery Mechanism in Phishing

“You’re Invited!” to Phishing Links Inside .ics Calendar Attachments

Practice Makes Perfect

New Mass Logger Malware Could Be Massive

Zoom Phish Zooming Through Inboxes Amid Pandemic

Phishers Cast a Wider Net in the African Banking Sector

MFA Bypass Phish Caught: OAuth2 Grants Access to User Data Without a Password

A Not So Relieving Tax Relief Email: Threat Actors Take Aim at US Stimulus Efforts

IRS Phishing Email – Up and Coming Phishing Campaign Is Taxing to Users

Telegram Utilized for Harvesting Credentials

Cofense PhishMe: Our FedRAMP Journey

Phish Found in SEG-Protected Environments Week ending February 19, 2021

Phish Found in SEG-Protected Environments Week ending February 12, 2021

Phish Found in Proofpoint-Protected Environments Week ending February 5, 2021

BazarBackdoor’s Stealthy Infiltration Evades Multiple SEGs

Emotet Disrupted but Likely to Return

By Brad Haas, Cofense Threat Intelligence  Background  Originally a banking Trojan, Emotet evolved to become more of a gateway for other malware families such as Ryuk, TrickBot, and QakBot. For the last few years, it has been among the top producers of malicious emails, using innovative and regularly updated techniques. For example, recently it harvested email reply chains from victims, and used those to create effective lures to send to the victims’ contacts. It also uses several tactics to avoid detection, such as delivery via password-protected zip file attachments and hosting itself on a large collection of legitimate but compromised websites. Emotet’s authors have shown remarkable patience and willingness to...

Signature Deadline: The Creation of Panic by Phish

“You’re Invited!” to Phishing Links Inside .ics Calendar Attachments

Practice Makes Perfect

Zoom Phish Zooming Through Inboxes Amid Pandemic

Phishers Cast a Wider Net in the African Banking Sector

MFA Bypass Phish Caught: OAuth2 Grants Access to User Data Without a Password

A Not So Relieving Tax Relief Email: Threat Actors Take Aim at US Stimulus Efforts

Phishers Continue to Spoof WebEx

Want to simulate a holiday phish? This one’s from your friends at Emotet.

By Tonia Dudley Tis the season when organizations are looking to send out the year’s last phishing simulation. Often the Security Awareness team lands on a holiday theme – holiday party, holiday raffle, or even the fun ugly sweater lure. In the past, when I worked with teams to advance their phishing defense programs, I would recommend staying away from holiday themed scenarios. I’ll explain why in a moment. But my opinion has changed, thanks to the threat actors behind Emotet.

Trickbot Is Using Google Docs to Trick Proofpoint’s Gateway