Info Security Magazine
3 years, 7 months ago
BEC Attacks Expand Beyond Email and Toward Mobile Devices
Scammers typically obtain mobile numbers from data breaches, social media and data brokers
Security news aggregator
Latest coverage for Email
Stay secure with the latest email security updates, best practices, and threat alerts to protect your inbox and sensitive information.
7
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Email is a system for exchanging digital messages, typically using mail servers and clients over a network. In security, it includes both the messages and the accounts, servers, domains, and authentication mechanisms that handle them. Email commonly carries phishing links, malicious attachments, and fraudulent requests for payments or credentials; compromised accounts can also be used to impersonate trusted people and conduct further attacks.
Defenses include filtering and malware scanning, phishing-resistant multifactor authentication, careful handling of links and attachments, and monitoring for unusual login or sending activity. Domain controls such as SPF, DKIM, and DMARC help receiving systems detect messages that are forged or sent without authorization, while encryption protects message contents in transit or at rest when correctly implemented. Security teams should preserve relevant headers and mailbox activity so suspicious messages can be investigated, removed, and used to identify affected accounts and other recipients.
Showing 7 most recent headlines
Filtered view
Bleeping Computer
3 years, 7 months ago
Hacked corporate email accounts used to send MSP remote access tool
MuddyWater hackers, a group associated with Iran's Ministry of Intelligence and Security (MOIS), used compromised corporate email accounts to deliver phishing messages to their targets. [...]
Krebs on Security
3 years, 7 months ago
New Ransom Payment Schemes Target Executives, Telemedicine
Ransomware groups are constantly devising new methods for infecting victims and convincing them to pay up, but a couple of strategies tested recently seem especially devious. The first centers on targeting healthcare organizations that offer consultations over the Internet and sending them booby-trapped medical records for the "patient." The other involves carefully editing email inboxes of public company executives to make it appear that some were involved in insider trading.
Bleeping Computer
3 years, 7 months ago
Automated dark web markets sell corporate email accounts for $2
Cybercrime marketplaces are increasingly selling stolen corporate email addresses for as low as $2 to fill a growing demand by hackers who use them for business email compromise and phishing attacks or initial access to networks. [...]
Dark Reading
3 years, 7 months ago
Rackspace Incident Highlights How Disruptive Attacks on Cloud Providers Can Be
A ransomware attack on the company's Hosted Exchange environment disrupted email for thousands of mostly small and midsize businesses.
The Register
3 years, 7 months ago
Rackspace confirms ransomware behind days-long Exchange email outage
Hope the name Hackspace doesn't stick Rackspace has admitted a ransomware infection was to blame for the days-long email outage that disrupted services for customers. …
The Register
3 years, 7 months ago
Rackspace customers rage as email outage continues and migrations create migraines
Hosting company has nothing to say on data loss, restore times, or root cause Rackspace has not offered any explanation of the "security incident" that has taken out its hosted Exchange environment and led the company to predict multiple days of downtime before restoration.…