Shodan is a free security tool helping defenders keep track of all the computers on their network that are directly accessible from the Internet. Shodan makes it easy to search a subnet or domain for connected devices, open ports, default credentials, even known vulnerabilities.

Spam and phishing campaigns remain a firm favourite infection vector for malicious actors but cybercriminals appear to be expanding the file types they abuse in an effort to find more effective ways to distribute malware.

Researchers at Automated Breach and Attack Simulation solution provider Cymulate have reportedly found a vulnerability in Microsoft Word’s online video feature that allows threat actors to replace legitimate YouTube iframe code with malicious HTML/JavaScript code.

A new RTF-based campaign has been discovered by researchers at Cisco Talos that is distributing two different sophisticated information stealing trojans: ‘Agent Tesla’ and ‘Loki’, that has slipped under the radar of common anti-virus solutions. Learn more…

Last week Secrutiny Analysts investigated suspicious emails sent to multiple employees within an organisation. The phishing emails could easily have been mistaken for genuine emails since it included the correct name and details of the victims. However, upon closer inspection, the emails were found to not be targeted at the organisation but part of an ongoing campaign using PowerShell. Learn more…

RIG Exploit kit (currently the most used exploit kit) is now back, in its fourth upgraded version, and it’s up to no good again. Over the last few weeks, security analysts have been observing a rootkit named CEIDPageLock being distributed by the RIG Exploit kit.