Perception Point Blog Archive

Blockchain.com Phishing Campaign Prompts Malware Download

This article investigates two distinct attack campaigns targeting cryptocurrency users that are currently trending at multiple organizations, and how phishing attacks are used to entice victims to download malware or provide their credentials.

Ofek Ronen, Machine Learning Software Engineer
Oct-21

Virtual Event: How did the bad guys get in? Attack vectors in the modern enterprise

Have you ever wondered how you were hacked? In this meetup, Perception Point will discuss the latest attack vectors that cybercriminals are employing to breach organizations. We will cover various techniques used through the email channel, cloud collaboration channels including Box, Dropbox, OneDrive, and Google Drive and perimeter breaches - diving into the attack kill chains.

Perception Point Marketing
Oct-21

Geek Squad Phone Scam Campaign Aims to Hack Organizations

A sophisticated fraud impersonates Geek Squad and convinces victims to phone their “call center” and provide the attackers access to their computers

Perception Point Incident Response
Sep-21

System Hardening Guidelines: Critical Best Practices

In this post we review the critical best practices and guidelines for system hardening. Read to learn more.

Perception Point Marketing
Sep-21

How to Stop Content-Borne Security Threats from Infiltrating your S3 Buckets

Join experts from AWS & Perception Point on October 13th, as they discuss how modern enterprises and application providers can be vigilant about their cloud storage security and at the same time avoid being held back by slow, complex, and outdated security solutions.

Perception Point Marketing
Sep-21

Microsoft Phishing Campaign Lures Victims to Call a Toll-free Number and Leave Payment Details

A phishing campaign impersonating Microsoft gets victims to voluntarily call a number and provide their credit card information to the attackers

Ofek Ronen, Machine Learning Software Engineer
Sep-21

Why Advanced Phishing Protection is Needed: Attackers Are Using Salesforce’s Mass Email Service to Perpetrate Phishing Attacks

A sophisticated phishing attack spoofing the Israeli Postal Service and leveraging Salesforce mass email service for malicious purposes.

Perception Point Incident Response
Aug-21

Beware! Sophisticated Vodafone Phishing Attack Is Doing The Rounds

Attackers are getting smarter, putting more users at risk: this phishing campaign spoofing Vodafone includes all the finer details

Elad Damari, IR Team
Aug-21

How to Detect Malware: Hancitor Malware Delivered Using Spoofed Docusign Email and Microsoft Word

Perception Point’s advanced email security service managed to intercept thousands of attack emails impersonating DocuSign, utilizing the Hancitor Malware. The following blog details this alarming attack.

Perception Point Incident Response
Jul-21

Phishing Campaign for Stealing USPS Customers’ Credit Cards Details

A sophisticated attack spoofing the United States Postal Service lures unsuspected users to enter their personal information and credit card numbers.

Din Serussi, IR Team
Jul-21

Using CVE-2020-9971 to escape Microsoft Office’s app sandbox

In this blog, our researchers demonstrate how they were able to weaponize a Word document with a published macOS/iOS privilege escalation exploit, lift the app sandbox restrictions and gain higher privileges.

Ron Hass, Senior Researcher
Jun-21

Dangerous Phishing Campaign for Harvesting Credentials using an HTML Attachment

Be aware. Attackers are impersonating legitimate brands, attaching to emails an HTML file containing a fake log-in page, intended for harvesting credentials. To complete the disguise, they finish with redirecting to the real brand website.

Oded Kalev, Software Dev
Jun-21

Blog.