Internet Safety Week – Edition No. 128

In issue #128 of Internet Security Week , we discuss the rise in Vishing scams, cyberattacks without malware, fake invoice scams, and much more.

News

Vishing | Increase in scams puts Interpol on alert

Voice phishing scams (or vishing scams) are becoming an increasingly significant threat worldwide and have even worried Interpol. Even though the agency has increased its crackdown on this type of criminal strategy, the risk of becoming a victim of vishing has reached unprecedented levels.

By Kaique Lima on Canaltech

Cyberattacks without malware?

Recently, some news has emerged about the activities of the Luna Moth group, which specializes in corporate data theft and blackmail. The big difference with Luna Moth is that they obtain information without using malware.

By Anastasia Starikova in Kaspersky Daily

Fake invoice: criminals impersonate a service provider to spread the Grandoreiro trojan

Although this new campaign is even more complex because it distributes malicious software rather than simply sending a fake invoice for victims to pay, it's possible to spot a number of signs that clearly indicate it's a scam.

By Daniel Cunha Barbosa in We Live Security

Spanish research agency still recovering after ransomware attack last month

The Spanish National Research Council (CSIC) was hit by a ransomware attack last month that is now being attributed to Russian hackers.

By Ionut Ilascu in Bleeping Computer

Brazil's Superior Electoral Court (TSE) launches action against hackers after report warns of attacks on the eve of elections

Alerted by a technical group dedicated to information security, the Superior Electoral Court (TSE) is working with the possibility of suffering hacker attacks on the eve of the October elections. Faced with the global scenario of "increasing threats," the Electoral Court has been implementing measures to protect the electoral system in Brasília and also in the regional courts.

By Vinícius Valfré on UOL

Criminals use malicious PDFs to spread malware; learn how to protect yourself

Lightweight and secure, PDF is a very popular file format, used to upload everything from a resume sent by someone looking for a job to an electricity bill for those who opted to receive it by email. However, the trust in the format has been exploited by cybercriminals to spread malware.

By Kaique Lima on Canaltech

A half-billion-dollar crypto heist

We often write about scams that promise mountains of gold, when in reality the opposite happens and the victims end up with empty pockets. Similarly, cybercriminals can get their hands on the money of entire companies by exploiting the greed and negligence of their employees.

By Leonid Grustniy in Kaspersky Daily

Criminals attack delivery apps to steal credit card data in the US

Criminals stole credit card data from over 300 restaurants in attacks targeting three food delivery apps.

By Juan Manuel Harán in We Live Security

Wolf in sheep's clothing: how malware deceives users and antivirus software

One of the main methods used by malware distributors to infect devices is to trick people into downloading and running malicious files, and to achieve this deception, malware authors are using a variety of tricks.

By Bill Toulas on Bleeping Computer