Microsoft has warned of tax-themed phishing campaigns that abuse legitimate services to deploy malware and steal credentials. Techniques used include URL shorteners, QR codes, and phishing-as-a-service platforms to direct users to phishing sites. These campaigns also deliver remote access trojans and other malware. Microsoft has detected campaigns targeting thousands of U.S. organizations, particularly in the engineering, IT, and consulting sectors. The company advises organizations to use phishing-resistant authentication methods, browsers that block malicious websites, and network protection to guard against these attacks.
-1744079369785-w300.jpg?w=0&resize=0,0&ssl=1)
Taking a holistic approach to medical device security
Fortinet will host a webinar series addressing medical device security for healthcare institutions. The sessions will cover risk assessment, security policies, compliance, segmentation, patch management,