malware

Dridex malware, also known as Bugat and Cridex, spread via fake .doc attachments

The UK’s National Crime Agency (NCA) has issued a warning to UK online banking consumers to guard against the possibility of having been infected by the Dridex malware, also known as Cridex and Bugat, stating that there could be ‘thousands of infected computers’ in the UK. The NCA are joining with the FBI in the United States to ‘sinkhole’ the botnet which is responsible for the spread of the malware. The report indicates that Windows users are the primary targets of the attacks.

The Dridex malware is a new strain of the Cridex breed, and infects users via macro actions which launch when opening infected documents which are often sent as spam emails about invoices, parcel delivery notes and fake banking alerts.
Is Website Malware Affecting Your Customer Relationships?

Cybercrimes are threatening both consumers and companies. According to the June 2017 McAfee Labs Threats Report, there were 244 new cyber threats every minute in Q1 2017 — that's more than four threats every second.

The report also found that total malware samples reached 670 million that same quarter and that the total number of mobile malware samples reached 16.7 million.

“Retailers that protect their customers from journey hijacking experience immediate increases in customer retention rates, as well as a decrease in both cart abandonment and bounce rates,” Ohad Greenshpan, cofounder and CTO of Namogoo, stated in a press release.
Lenovo caught installing adware on new pc's which breaks HTTPS

The adware, named Superfish, is reportedly installed on a number of Lenovo’s consumer laptops out of the box. The software injects third-party ads on Google searches and websites without the user’s permission.

Some users are reporting that the adware actually installs its own self-signed certificate authority which effectively allows the software to snoop on secure connections, like banking websites and email.

This is a bad thing because it allows the software to decrypt communications between secure sites and their users.
Ransomware has gone down because sanctions against Russia are making life harder for attackers

The number of ransomware attacks has gone down in recent months because sanctions against Russia are making it harder for cyber criminals to organise attacks and receive ransom payments, Rob Joyce, director of cybersecurity at the National Security Agency (NSA), has revealed. Ransomware attacks have long been a major cybersecurity issue for organisations around the world, affecting computer networks running critical infrastructure, hospitals, businesses and more.
Smoking Can Be Bad For Your Computer Also

Security researchers have demonstrated how e-cigarettes can easily be modified into tools to hack computers. With only minor modifications, the vape pen can be used by attackers to compromise the computers they are connected to - even if it seems just like they are charging.

Giving a presentation at BSides London, Ross Bevington showed how an e-cigarette could be used to attack a computer by fooling the computer to believe it was a keyboard or by tampering with its network traffic.
What is the cost of a cyber attack on WordPress or Joomla?

According to a recent survey, the average cost estimate for cleaning up a cyberattack comes in at around £850,000.

But this is actually a conservative estimate: For those organisations that actually calculate (versus estimate) the real cost of an attack, that number increases significantly to £1.3 million.

How is this calculated and what does it entail? According to the survey:

“Quantifiable monetary losses can be directly tied to the aftermath of cyberattacks in lost revenue, unexpected budget expenditures and drops in stock values,” according to the report. “Protracted repercussions are most likely to emerge as a result of negative customer experiences, damage to brand reputation and loss of customers.”

This doesn't even include the actual costs of repairing the damage and updating existing systems to prevent future incidents.

At Wintercorn we've seen companies large and small suffer an attack because they simply didn't know they were being attacked and didn't know what to do until it was too late. They had no IDS (Intrusion Detection Systems) operating, they had no named person responsible for their website and they didn't bother with updates because "we're not very good with computers".

Some even hosted their corporate websites on $5 per month shared servers with thousands of other sites. This is actually one of the most common routes to an attack and one of the most dangerous to your website, data and brand.