Blog - Page 15 of 17 - Perception Point

What is a Zero Day Attack?

A zero day attack (also known as a zero day exploit) is one that leverages a software vulnerability that is either unknown or unaddressed by the software vendor; for example, bugs in Microsoft Office apps or Adobe Reader.

Perception Point Research
Oct-19

BEC Scams: Mimecast Spoofing

Learn about a BEC scam comprised of two layers: spoofing a user’s email address and a phishing attempt to get Office 365 log-in credentials.

Perception Point Incident Response
Oct-19

Campaign Alert: G Suite Phishing

Learn how Perception Point detected a widespread phishing attack campaign by noticing the common factor of G Suite account tools usage.

Perception Point Incident Response
Jul-19

BEC: You Have (Almost) Been Compromised!

Learn more about BEC (Business Email Compromise), an impersonation-based attack leveraging social engineering techniques.

Perception Point Incident Response
May-19

Incident Report: A Combined Attack

Learn how we intercepted an email thread that combined popular attack vectors: impersonation, encrypted archive, and a malicious macro.

Perception Point Incident Response
May-19

Statement of Account Email Attack

Learn about the widespread attack in which users first receive an email from an external source requesting an updated Statement of Account.

Perception Point Incident Response
May-19

Campaign Alert: Call Me ASAP

Learn how attackers take an email address and insert it into the account name so users believes the site is legitimate in a recent campaign.

Perception Point Incident Response
May-19

CVE-2019-0539 to Remote Code Execution (RCE)

This post reviews how to achieve a full R/W (Read/Write) primitive which can ultimately lead to a RCE (Remote Code Execution).

Rom Cyncynatus, Security Researcher
Mar-19

Incident Report: Composite Moniker (CVE-2017-8570) & OLE Object

Learn how we intercepted a RTF document that leverages CVE-2017-8570, the “Composite Moniker”, a document containing an "ole object".

Perception Point Incident Response
Feb-19

Incident Report: CV or Cyber Vector?

In this post we discuss how a cyber attack involving malicious macro code was disguised as a CV delivered via email.

Perception Point Incident Response
Feb-19

CVE-2019-0539 Root Cause Analysis

Learn how CVE-2019-0539 was fixed in the Microsoft Edge Chakra Engine update for January 2019 via a Root Cause Analysis (RCA) report.

Shlomi Levin
Feb-19

Incident Report: Fibonacci Backdoor & Malicious Email

Learn how the Fibonacci backdoor infection process grants an attacker control to remotely execute commands through malicious email.

Perception Point Incident Response
Jan-19

Blog.