Coronavirus news, articles & updates| SC Media
Skip to navigation Skip to main content

Coronavirus

APTs/cyberespionage, Coronavirus, Cybercrime, Events, Government, Government/Defense, InfoSec World 2020, Insider Threats, Network Security, Security News

Ex-CIA exec: Covid-19 has created ideal ‘crisis’ conditions for malicious hackers

By
Publish Date

Companies trying to stave off business disruption caused by the global Covid-19 pandemic may be ripe for compromise as they introduce new risks in the scramble to maintain business continuity, warned a retired senior CIA executive in a keynote presentation Wednesday at the InfoSec World 2020 digital conference. In essence, the coronavirus has created ideal…

APTs/cyberespionage, Coronavirus, Phishing, Security News

Report: Lazarus Group has large-scale Covid-19 phishing campaign in the works

By
Publish Date

North Korea’s Lazarus group is likely behind a planned coronavirus-related phishing campaign taking aim at more than 5 million businesses and people in the U.S. and five other countries June 21. “The hacking campaign involved using phishing emails under the guise of local authorities in charge of dispensing government-funded Covid-19 support initiatives,” researchers at Cyfirma…

Coronavirus, Government, Mobile Security, Privacy & Compliance, Security News

Amnesty Int’l: Norway, Bahrain & Kuwait Covid-19 apps threaten privacy

By
Publish Date

An Amnesty International study of 11 Covid-19 contact tracing apps from Europe, the Middle East and North Africa found identified apps from Bahrain, Kuwait and Norway as the most dangerous to users’ privacy. In a news release published on Tuesday, the human rights organization’s Security Lab said Bahrain’s ‘BeAware Bahrain’, Kuwait’s ‘Shlonik’ and Norway’s ‘Smittestopp’…

Coronavirus, Email Security, Security News

M3AAWG issues email authentication advice for security pros

By
Publish Date

The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) has put out a joint call-to-action with Google and Verizon for the security industry to take more proactive measures to authenticate and secure their sending domains and email addresses by deploying email authentication at scale. Preventing rampant phishing during the COVID-19 period should be a top…

Coronavirus, Phishing, Security News

German phishing scheme preyed on high-level execs needing PPE

By
Publish Date

One hundred German companies in need of personal protective equipment (PPE) such as facemasks and medical gear were targeted in a COVID-19 phishing scheme designed to steal and exfiltrate user credentials. IBM X-Force IRIS discovered unknown hackers erected a fake Microsoft login page connected to different Yandex email accounts, although it was unknown how many…

Coronavirus, Cybercrime, Email Security, Phishing, Security News

Phishing campaign targets remote workers with fake voicemail notifications

By
Publish Date

Looking for new angles to socially engineer employees working from home under COVID-19 conditions, attackers have devised a new phishing campaign that distributes emails that look as if they were generated by  Private Branch Exchange (PBX), a legacy technology that integrates with employees’ email clients so they can receive their voicemail recordings. In a company…

Coronavirus, IoT, Privacy & Compliance, Security News

Work from home survey finds major security lapses as workers share devices, reuse passwords

By
Publish Date

Stay-at-home workers are threatening corporate IT security with 93 percent of them admitting they reuse passwords and 29 percent allowing other family members to use their company-issued devices for homework and online entertainment, according to a report from CyberArk. In a late April 2020 survey of 3,000 remote office workers and IT professionals in the…

Coronavirus, Cybercrime, Email Security, Security News

States’ lack of DMARC adoption ups risk of Covid-19 email spoofing scams

By
Publish Date

As phishing scammers actively impersonate institutions like the World Health Organization and Centers for Disease Control and Prevention in order to capitalize on Covid-19 fears, government bodies and state-run health care organizations continue to make themselves vulnerable to email spoofing by failing to employ DMARC email validation protections, a new report states. An investigation by…

Coronavirus, Government, Privacy & Compliance, Security News, Website/Web Server Security

Kentucky is 6th state to disclose leak of unemployment claims amid Covid-19

By
Publish Date

Kentucky has become the sixth state to disclose a data leak related to unemployment-related forms that has taken place during the Covid-19 pandemic. The Kentucky Education & Workforce Development Cabinet (EWDC) on Thursday acknowledged that a vulnerability in its Unemployment Insurance Portal caused a data leak that allowed insurance claimants to view the identity verification…

Coronavirus, Data Breach, Finance, Security News, Web Services Security, E-Commerce Security, Website/Web Server Security

Test platform leaks Bank of America clients’ Covid-19 PPP loan applications

By
Publish Date

Bank of America has disclosed that it briefly exposed certain business clients’ Paycheck Protection Program (PPP) applications to outside parties after uploading the documents onto a test platform. The incident bears similarities to the recent news of at least states mistakenly exposing application information related to the Pandemic Unemployment Assistance (PUA) program. Both the PPP…

Next post in Coronavirus