The news is full of reports about compromised emails of important public officials and political leaders.  While we don't know for sure who is behind the compromise of these emails, all indications are that the Russians are behind this.  One of the leading investigators of this problem is Crowdstrike, who waxes poetic about the sophistication and technical prowess of the attackers. What are these bad guys doing that requires the resources of a country?  Is this some kind of cyber atomic bomb coming out of a massive cyber Manhattan project? No. Ars Technica shows us exactly what the attackers are doing.  They [...]

Buzzfeed is reporting that U.S. Senate staffers recently received cybersecurity training. What was the substance of the training these key government employees received?  What can you learn from this? The answer: “Don’t click on spear phishing emails” All that is left to do is determine which ones are the spearphishing emails so that you don't click on them. That's not so easy to do because the bad guys write emails that look real!  Help unmask fake emails so that you don't click on phishing emails.  Use SP Guard.

The BBC is reporting that the World Anti-Doping Agency has been hacked.  The hackers have released the confidential medical records of Simone Biles and Serena Williams. Serena Williams 2015 Australian Open How could this happen?  Spearphishing.  The hackers infiltrated the World Anti-Doping Agency using spearphishing.

Interpark, the popular South Korean ecommerce site, has been compromised. According to Korea Herald, the bad guys stole over 26.6 pieces of personal information about more than 10 million Interpark registered users. The Korea Herald reports that according to the ICT Ministry and the Korea Communications Commission the bad guys used a spearphishing attack which targeted one employee. Using the access created by the initial spearphishing attack, the bad guys were able to spread malware throughout Interpark's network and steal the users' personal information.

This innocuous looking email: isn't innocuous at all. Researchers at F-Secure have linked this email to a coordinated cyberattack against the Department of Justice of the Philippines, the organizers of the Asia-Pacific Economic Cooperation (APEC) Summit and a major international law firm. The attack methodology is the tried and true spearphishing attack. In this attack, the targeted person is tricked into installing Remote Access Trojan (RAT) that enables the attacker's remote command and control server. In this attack (like all spearphishing attacks), the victim was the agent of the attacker.  The attacker needed the victim to do three things for the attacker to evade [...]

The Russians have compromised the Democratic National Committee's systems.  Press reports indicate that the Russians obtained the entire DNC database on Donald Trump.  The Russians were in the DNC systems for about a year and were able to read emails and chats. DNC Chair Debbie Wasserman Schultz So, how did they do it?  Crowdstrike reports that the intrusion was accomplished using spearphishing.  After gaining access to the DNC systems, one of the of the techniques used to achieve the attacker's objectives was "living off the land" techniques in which the attackers use native system functions, such as powershell, [...]

FireEye has discovered how the point of sale systems of over 100 North American retail, restaurant and hospitality organizations were compromised. These compromised exposed payment card data to bad guys. In its report, Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks, FireEye describes in great detail how two zero day exploits are used to steal the payment data.  The first exploit allows the attacker to escalate the attacker's system privileges. The second exploit allows the bad guy to steal data out of the memory of Point of Sale (POS) systems. In order for these new exploits to do anything, the [...]