Infostealers blamed for surge in identity attacks

Advanced phishing kits and info-stealing malware have accounted for a 156 percent jump in cyberattacks targeting user logins. A new report from cybersecurity company eSentire shows attackers are increasingly opting for obtaining login credentials and session cookies via phishing or malware. This then allows them to carry out Business Email Compromise (BEC) attacks, gain access to bank accounts, or steal cryptocurrency. The use of phishing-as-a-service platforms, such as Typhoon 2FA, is making it easier to carry out attacks with minimal technical expertise and low cost. For around $200 to $300 per month the kits offer pre-made phishing pages for the… [Continue Reading]