Proofpoint threat researchers released new details on a widespread Request for Quote (RFQ) scam that involves leveraging common Net financing options to steal a variety of high value electronics and goods.

To understand how the scam works, our researchers posed as suppliers with lax finance departments and engaged directly with threat actors.

Step into the mind of a cybercriminal and read all about the anatomy of the scam in this blog: https://www.proofpoint.com/us/blog/threat-insight/net-rfq-request-quote-scammers-casting-wide-net-steal-real-goods

#shipment #RFQ #finance #scam

Help request. My brother has Stage 4 colorectal cancer.

His life insurance has refused to pay out on a technicality, meaning he and his loved ones cannot afford the mortgage on their home.

I've never asked for anything in return for infosec stuff, but if you have anything spare, please chuck it this direction instead:

https://gofund.me/b9a0d8f4

@GossiTheDog so sorry Kevin, just donated. Sending love to your family.

Nice work by International Law Enforcement in taking down the Danabot malware infrastructure. Includes quotes from @selenalarson of Proofpoint on the dual-use Cybercrime/Nation State Intelligence nature of some of the operations.

From: @arstechnica
https://mastodon.social/@arstechnica/114558921895285595

New report on the web injects landscape, two new threat actors, and new Mac malware: https://www.proofpoint.com/us/blog/threat-insight/update-fake-updates-two-new-actors-and-new-mac-malware

@capnhoppy I don’t feel bad for people who buy into meme coins promoted by fascists but there are a lot of people who found crypto thanks to tech bros and celebrities normalizing it, and that I do feel bad about.

The latest episode of Only Malware in the Building dives into romance scams, just in time for Valentine's Day. I encourage everyone to have more empathy for people who fall victim to social engineering, especially things like romance and sextortion.

https://thecyberwire.com/podcasts/only-malware-in-the-building/9/notes

@XenoDangerEvil oh no sorry to hear!

@catsalad last tax season my blog title was
Tis the season for tax hax 😂

It’s tax season so of course I’m blogging the scams https://www.proofpoint.com/us/blog/threat-insight/security-brief-threat-actors-take-taxes-account

New episode of DISCARDED! We're joined by Kristina Walter, Chief of the NSA's Cybersecurity Collaboration Center to talk about private / public sector partnerships, cybercrime and APT activities, and career pathways in this industry. It was a fantastic conversation and at one point I literally snapped for Kristina's amazing takes. Tune in wherever you get your podcasts! 
Apple: https://podcasts.apple.com/us/podcast/discarded-tales-from-the-threat-research-trenches/id1612506550?i=1000685038003
Spotify: https://open.spotify.com/episode/0Ontn7NsufUVen72X44oAn?si=0128fac511794931
Web: https://www.proofpoint.com/us/podcasts/discarded#140361

@WTL thank you for tuning in!

New episode of DISCARDED! 🎙️

We're joined by Hannah Rapetti to talk about how threat actors create and use malicious domains and the process for taking down adversary infrastructure. Tune in wherever you get your podcasts!
 
Apple: https://podcasts.apple.com/us/podcast/discarded-tales-from-the-threat-research-trenches/id1612506550?i=1000682992487
Spotify: https://open.spotify.com/episode/6gpE0Gy3tvp8F03U4TAHqg?si=944addc0a1d9454a
Web: https://www.proofpoint.com/us/podcasts/discarded#140011

Great piece by @selenalarson in @RUSI's journal about why cybercriminals on are par with APTs as far as capability and arguably pose a higher risk for most organisations for financial loss and damage: https://rusi.org/explore-our-research/publications/commentary/why-biasing-advanced-persistent-threats-over-cybercrime-security-risk #infosec

@selenalarson spitting some truth here. We ignore cybercrime at our own peril. Enough with the APT action figures; focus on the groups that have widespread daily impact on people's lives.

https://www.rusi.org/explore-our-research/publications/commentary/why-biasing-advanced-persistent-threats-over-cybercrime-security-risk

Really intelligent, thoughtful piece by @selenalarson here.

Back when I was still a reporter, writing about how cyber criminal attacks like ransomware happened and how to prevent them always felt more important to me than 'here's new sophisticated state theat actor 'Anxious Hamster doing this niche thing' stories.

https://www.rusi.org/explore-our-research/publications/commentary/why-biasing-advanced-persistent-threats-over-cybercrime-security-risk

@dannyjpalmer same!

cc @GossiTheDog in case it’s of interest

Stoked to put my rant to paper for this RUSI commentary!

“The truth is that foreign government adversaries no longer have a monopoly on sophistication or persistence. Cybercriminals have just as much if not more of an impact on the Western world.”

https://www.rusi.org/explore-our-research/publications/commentary/why-biasing-advanced-persistent-threats-over-cybercrime-security-risk

When it comes to today's cyber threat landscape, @selenalarson, staff threat researcher at Proofpoint, is making a claim:

Foreign government adversaries no longer have a monopoly on sophistication or persistence. Cybercriminals have just as much—if not more—of an impact on the Western world.

Read her full perspective: https://www.rusi.org/explore-our-research/publications/commentary/why-biasing-advanced-persistent-threats-over-cybercrime-security-risk

#APT #cybercrime #cyberattack