Forest Global Training Partners

Cyber Risks · Krebs on Security

Legal Threats Make Powerful Phishing Lures

Summary: A phishing kit traded on the underground sent fake legal-threat emails to roughly 100,000 business addresses, mostly on Canadian .ca domains with some in the northeastern United States, around May 12, 2019. The messages carried one of five booby-trapped Microsoft Word documents containing a trojan that Fortinet and Sophos said is typically used to drop additional malware, and 10 days after the spam run no more than three of about five dozen antivirus products detected any of the files as malicious.

Key Takeaway: The kit spoofed the domain wpslaw.com, which now redirects to a legitimate Connecticut firm, RWC LLC, that said it had no knowledge of the matter beyond a complaint call. A trojan previously associated with ransomware reached 100,000 inboxes while nearly every antivirus scanner on the market missed it, so detection rates alone are not a control a security leader can count on.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related