A new version of the obfuscation tool, ScrubCrypt, is being used to target organizations with a malware called RedLine Stealer, says Human Security’s Satori Threat Intelligence Team. ScrubCrypt helps avoid detection by converting executable files into batch files and is available for sale in dark web marketplaces. The new version was found to be used for account takeover and fraud attacks. To mitigate such threats, businesses are advised to deploy cookie-stealing attack protections, flag leaked or stolen user credentials, enforce password changes, and confirm identity through two-factor authentication.
The True Cost of Focusing on Cost Instead of Cost-Effectiveness
When payors consider only the cost of the medication and not the cost and risk to the patient, doctor, and healthcare system, the irony is
