No matter your industry, cybersecurity is no longer an option-it’s a necessity. This is where Microsoft 365’s enhanced security features come into play, with everything from automated threat detection to advanced conditional access policies. This enterprise-level protection bolsters your organization’s defenses and allows you to focus on growth, customers, and innovation, knowing your security is […]

Just as you would never leave your physical office unlocked and unattended, securing your technology is equally crucial. But wading through complex security settings can be overwhelming (to say the least). This is where Microsoft 365’s default security settings come in-a basic approach that offers a surprising amount of protection for your business. M365 Default […]

By Anthony Jirouschek, Security Architect On July 2nd, we published an article about an attack we observed using EtherHiding and Fake-Updates to deliver the Lumma infostealer. After the article was published, we did some threat hunting and found a different version of this attack that uses encoding to obfuscate, or hide, the attack better. As […]

By Anthony Jirouschek, Security Architect We recently observed an attack using EtherHiding to deliver Fake-Updates malware, which eventually resulted in an infostealer named Lumma being installed. EtherHiding is essentially using smart contracts on a crypto platform to obscure and deliver malicious code. In this case, the threat actor used Binance’s Smart Chain contracts. EtherHiding is […]