Listen "Contact Us; Phish You!"
Episode Synopsis
Threat actors are pesky and, once again, they're up to no good. A new methodology has schemers compromising online forms where users submit their information like their names, email addresses, and, depending on the type of site, some queries relating to their life. This new method indicates that the attackers have figured out a way around the CAPTCHA's that have been making us all prove we're not robots by identifying fire hydrants since 1997. And what's more, we're not quite sure how they've done it. In this episode, hosts Natalia Godyla and Nic Fillingham sit down with Microsoft threat analyst, Emily Hacker, to discuss what's going on behind the scenes as Microsoft begins to dig into this new threat and sort through how best to stop it. In This Episode You Will Learn: Why this attack seems to be more effective against specific professionals. Why this new method of attack has a high rate of success. How to better prepare yourself for this method of attack Some Questions We Ask: What is the endgame for these attacks? What are we doing to protect against IceID in these attacks? Are we in need of a more advanced replacement for CAPTCHA? Resources: Emily Hacker Investigating a Unique 'Form' of Email Delivery for IcedID Malware Microsoft Security Blog Nic's LinkedIn Natalia's LinkedIn Related: Listen to: Afternoon Cyber Tea with Ann Johnson Listen to: Security Unlocked: CISO Series with Bret Arsenault Security Unlocked is produced by Microsoft and distributed as part of The CyberWire Network.
More episodes of the podcast Security Unlocked
Cryptojacking, and Farewell for Now!
16/02/2022
A look at Cybercrime in 2021
02/02/2022
What's a BISO?
19/01/2022
Disinformation in the Enterprise
05/01/2022
I am Shroot-less
22/12/2021
Decoding NOBELIUM
08/12/2021
Trusting Your Hybrid Workforce
24/11/2021
When Privacy Meets Security
10/11/2021
Securing Modern Software
27/10/2021
The 2021 Microsoft Digital Defense Report
20/10/2021
ZARZA We are Zarza, the prestigious firm behind major projects in information technology.