Parks and Recreation/NBC via Giphy
Add “courier” to the list of professionals that hackers are impersonating for their own gains.
In a public service announcement Monday, the FBI revealed scammers—and in-person scammer couriers—are taking money and assets from unsuspecting victims. The announcement of the fraud spike is another recent example of cybercriminals taking a more personal, less technical tactic.
“Scammers sometimes use a multi-layered approach, posing, in succession, as a technology company, a financial institution, and a US government official,” the agency said in its advisory.
According to the alert, step one of the scheme involves the posers informing victims, “many of whom are senior citizens,” that their financial accounts have been hacked and they need to protect their funds by liquidating assets into cash or precious metals like gold or silver. Step two is the pickup, when a courier retrieves the cash at the victim’s home or a public location.
Read more here.—BH
|
|
“The best offense is a strong defense,” and ohhh does that ring true when it comes to data. It’s the lifeblood of business these days, so it’s absolutely imperative to keep data safe and secure from ransomware, natural disasters, simple human errors—the works.
Good thing there’s Veeam. Trusted by more than 80% of the Fortune 500 to protect and restore data, Veeam’s committed to helping every company become radically resilient. This allows you to bounce forward from any disruption and crush your goals.
Curious about how Veeam’s enterprise-grade solutions can help you? Say hi to:
- multilayered protection
- secure-by-design architecture across your hybrid cloud
- fast, clean, and reliable recovery
- total ownership and control of your data
Secure your fort.
|
|
Francis Scialabba
A threat actor believed to operate on behalf of the North Korean government is continuing to target media organizations and academics—and its newest malware indicates it’s on the hunt for insider tips against cybersecurity pros, according to SentinelLabs.
Over the last two months of 2023, ScarCruft hackers busied themselves targeting media organizations and academics specializing in North Korean affairs, SentinelLabs researchers wrote in a report. The researchers also acquired samples of ScarCruft malware that appeared to reflect various stages of development, shedding light on potential future attacks.
SentinelLabs researchers observed ScarCruft hackers use phishing emails to distribute the RokRAT backdoor malware, which the security firm describes as a “fully featured backdoor” useful for surveillance purposes. In one of the attacks, a suspected member of the group impersonating a member of the Seoul-based North Korea Research Institute distributed an archive via email that supposedly contained presentation materials from a recent human rights meeting.
Alongside innocuous materials, the archive contained malicious LNK files—Windows shortcut files that have become a popular vehicle for hackers after Microsoft took steps to limit malware via macros in 2022. According to SentinelLabs, RokRAT attacks utilize public cloud services to disguise command and control communications as legitimate traffic.
Read more here.—TM
|
|
Marlon Trottmann/Getty Images
IBM has a message for managers: Get to your desk or get lost.
In a memo sent mid-January, IBM SVP John Granger ordered all managers in the US to report to the office at least three days a week “regardless of current work location status,” effective immediately and to be enforced via badge-swipe data, Bloomberg reported.
The memo also notified managers who have been working from too far afield to commute to relocate by August, according to Bloomberg, with one source saying they understood the directive to be an order to move within 50 miles of an IBM office.
Granger reportedly warned that barring exceptions such as medical issues, managers who cannot meet these requirements, and who cannot transfer to a job with looser in-person requirements, will “separate from IBM.”
Keep reading here.—TM
|
|
Let us make you smarter. Did you know you can listen to and/or watch the wittiest and smartest takes on business news? Morning Brew Daily covers everything from the latest headlines on the economy to explanations of viral TikTok trends. Find it on YouTube and all podcasting platforms.
|
|
Francis Scialabba
Today’s top IT reads.
Stat: 10%. That’s all that’s left of Google’s AI-focused Responsible Innovation team after a company shakeup reportedly transferred 90% of them to trust and safety, which focuses on protecting Google services from abuse. (Wired)
Quote: “Their constant pursuit of engagement and profit over basic safety have all put our kids and grandkids at risk.”—Dick Durbin, Illinois Democratic senator, to tech CEOs at a hearing on if their platforms are harming children (the Wall Street Journal)
Read: ChatGPT was likely deployed for a social engineering attack on rental car company Europcar on January 28, the company said. (TechCrunch)
Real talk: Data is more valuable than gold these days. That’s why you need Veeam (trusted by more than 80% of the Fortune 500) to keep yours safe and secure. Lock it down.* *A message from our sponsor.
|
|
When’s the last time you landed a job by applying cold? We’ve partnered with CollabWORK, the first community-powered hiring platform, to bring curated jobs from companies looking to connect with IT Brew readers. Apply below and join CollabWORK for free.
|
|
Share IT Brew with your coworkers, acquire free Brew swag, and then make new friends as a result of your fresh Brew swag.
We’re saying we’ll give you free stuff and more friends if you share a link. One link.
Your referral count: 2
Click to Share
Or copy & paste your referral link to others: itbrew.com/r/?kid=9ec4d467
|
|
|