Carolina IT Services

05/25/2023

https://www.bleepingcomputer.com/news/security/microsoft-365-phishing-attacks-use-encrypted-rpmsg-messages/

Attackers are now using encrypted RPMSG attachments sent via compromised Microsoft 365 accounts to steal Microsoft credentials in targeted phishing attacks designed to evade detection by email security gateways.

05/23/2023

PSA: Ever wonder if your email address and password were compromised in a data breach? You can check your email addresses on this site to see what companies had data breaches where your email address password might have been revealed. It will tell you the approximate date of the breach as well. If your email address shows up and you still use the same password for the service what was compromised, it would be a good idea to change the password on any accounts that still use it.

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

04/26/2022

https://hothardware.com/news/facebook-phishing-scam-directs-victims-to-real-fb

A recent Facebook phishing scam directed victims to a real Facebook post before stealing their information

02/23/2022

https://www.bleepingcomputer.com/news/security/devious-phishing-method-bypasses-mfa-using-remote-access-software/

A devious new phishing technique allows attackers to bypass MFA by secretly having victims log in to their accounts directly on attacker-controlled servers using VNC.

02/09/2022

https://www.bleepingcomputer.com/news/security/fake-windows-11-upgrade-installers-infect-you-with-redline-malware/

Threat actors have started distributing fake Windows 11 upgrade installers to users of Windows 10, tricking them into downloading and executing RedLine stealer malware.

02/03/2022

https://www.bleepingcomputer.com/news/security/malicious-csv-text-files-used-to-install-bazarbackdoor-malware/

A new phishing campaign is using specially crafted CSV text files to infect users' devices with the BazarBackdoor malware.

01/24/2022

https://www.bleepingcomputer.com/news/security/fbi-warns-of-malicious-qr-codes-used-to-steal-your-money/

The Federal Bureau of Investigation (FBI) warned Americans this week that cybercriminals are using maliciously crafted Quick Response (QR) codes to steal their credentials and financial info.

12/07/2021

https://www.bleepingcomputer.com/news/security/convincing-microsoft-phishing-uses-fake-office-365-spam-alerts/

A persuasive and ongoing series of phishing attacks are using fake Office 365 notifications asking the recipients to review blocked spam messages, with the end goal of stealing their Microsoft credentials.

05/11/2021

https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-bug-prevents-viewing-or-creating-email-worldwide/

A Microsoft Outlook update released today for the desktop client introduced bugs that prevent users from creating or viewing mail.

07/15/2020

https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-is-crashing-worldwide-with-0xc0000005-errors-how-to-fix/

Microsoft Outlook is immediately crashing worldwide when users start the application, with 0xc0000005 errors being displayed in the Windows Event Viewer.

10/09/2019

https://www.techradar.com/news/chrome-and-firefox-hit-by-encyption-busting-malware-what-you-need-to-know?utm_content=buffer669bc&utm_medium=social&utm_source=facebook&utm_campaign=buffer-trfb&fbclid=IwAR0CZLHNXVcOlNNBASDYVqFK4shd8bQhpW7EiScvQmD7OwqcdWTiQs3w8aM

06/17/2019

A new form of attack, beware!

Hackers have realized that they can take advantage of default calendar settings to plant their own events that are tainted with phishing links onto a user's computer.