All posts tagged: two-factor authentication

How to Protect and Secure Your Data in 10 Ways

How to Protect and Secure Your Data in 10 Ways

Operating systems and applications can always be reinstalled, but your data is unique, making it the most important thing on your computer or network. “Organizations must now maintain robust privacy measures, including clear privacy policies, opt-out processes, and compliance with consumer protection laws, to mitigate financial and reputational risks,” said IEEE Senior Member Kayne McGladrey in an email to TechRepublic. Here are 10 ways you can protect that data from loss and unauthorized access. 1. Protect everything with passwords Password protection is the first line of defense against unauthorized access to your data; it also helps boost multilayer security for your systems by allowing you to combine password protection with other security measures. Some businesses are required to use password protection as part of compliance regulations, such as the General Data Protection Regulation. To password protect your business data, implement a strict password policy to ensure employees create complex passwords. Additionally, you should have them update their passwords regularly. 2. Back up regularly Backing up your data early and regularly is an important component of …

Sneaky Log Phishing Scheme Targets Two-Factor Security

Sneaky Log Phishing Scheme Targets Two-Factor Security

Security researchers at French firm Sekoia detected a new phishing-as-a-service kit targeting Microsoft 365 accounts in December 2024, the company announced on Jan. 16. The kit, called Sneaky 2FA, was distributed through Telegram by the threat actor service Sneaky Log. It is associated with about 100 domains and has been active since at least October 2024. Sneaky 2FA is an adversary-in-the-middle attack, meaning it intercepts information sent between two devices: in this case, a device with Microsoft 365 and a phishing server. Sneaky 2FA falls under the class of business email compromise attacks. “The cybercriminal ecosystem associated with AiTM phishing and Business Email Compromise (BEC) attacks is continuously evolving, with threat actors opportunistically migrating from one PhaaS platform to another, supposedly based on the quality of the phishing service and the competitive price,” Sekoia analysts Quentin Bourgue and Grégoire Clermont wrote in the firm’s analysis of the attack. Must-read security coverage How does the Sneaky 2FA phishing-as-a-service kit work? Sneaky Log sells access to the phishing kit through a chatbot on Telegram. Once the customer …