Perception Point Blog Archive

Behind the Attack: Account Takeover (ATO)

In this blog we explore the kill chain of a compromised mailbox, after a user has undergone an Account Takeover (ATO) attack.

Din Serussi, IR Team
Apr-23

AI: The Double-Edged Sword of Cybersecurity

Attackers are using AI in their cyber offense, but cybersecurity leaders can also take advantage of AI in their defense.

Perception Point Marketing
Apr-23

Hackers Use Password-Protected OneNote Files to Spread Malware

In this blog, we explore a new attack in which threat actors exploit encrypted OneNote documents to deliver malware.

Igal Lytzki, IR Team
Apr-23

The Risks of Malicious File Uploads to Web Apps & How to Prevent Them

Files "are like a box of chocolates, you never know what you're going to get".

Peleg Cabra, Product Marketing Manager
Mar-23

6 Steps of the Facebook Credentials Phishing Campaign

There’s a new sophisticated phishing campaign making its rounds that aims to trick Facebook users into giving scammers their account credentials and PII by leveraging validation processes to seem credible.

Dana Shaked, Incident Response Analyst
Mar-23

3 Key Takeaways from the 2023 Gartner® Market Guide for Email Security

As email continues to be the primary vector for cyber attacks, staying up to date with the latest developments in email security is essential. In this blog post, we examine key insights from the latest Market Guide for Email Security Report by Gartner, and offer practical recommendations on how security and risk management leaders can fortify their security posture in 2023.

Peleg Cabra, Product Marketing Manager
Mar-23

What are Two-Step Phishing Attacks & How Do They Work

Hundreds of legitimate websites are being used in two-step phishing attacks. Novel computer vision models can prevent them from reaching users' inboxes.

Ofek Ronen, Machine Learning Software Engineer
Feb-23

Behind the Attack: Paradies Clipper Malware

In this blog we cover a new underground Clipper malware that allows attackers to replace a victim's crypto wallet with their own.

Igal Lytzki, IR Team
Feb-23

Takeaways from the CircleCI Incident

Continuous integration and delivery platform CircleCI confirmed that a security incident occurred on January 04, 2023 and was caused by an infostealer being deployed on an employee’s laptop. Because the targeted employee had privileges to generate production access tokens, the attacker was able to potentially access and steal data from a subset of databases and stores.

Boris Figovsky
Jan-23

Malicious Office Macros: Detecting Similarity in the Wild

In this blog, we focus on similarity in the context of Microsoft Office macros, which are widely exploited by attackers to deliver malware.

David Trabish
Jan-23

Zendesk – Is It a One Way “Ticket” to Ransomland?

In this blog, we will focus on Zendesk, a leading provider of customer support tools, and review its main security vulnerability and how organizations can best mitigate their risks on the platform.

Peleg Cabra, Product Marketing Manager
Jan-23

The Rebranded Crypter: ScrubCrypt

In this blog we review the ScrubCrypter and how attackers are using phishing campaigns to distribute it and its accompanying malware.

Igal Lytzki, IR Team
Jan-23

Blog.