Reply to thread

Message

<blockquote data-quote="bazang" data-source="post: 1118001" data-attributes="member: 114717">No house of cards. No tricking anybody. I have made statements of fact.Here is an example of a malicious campaign that the cybersecurity news reports as targeting &quot;Mac Users.&quot; What the article author fails to mention - or further specify and clarify - is who is actually the intended target. He states &quot;Mac Users.&quot; But the fact is that it is a subset of all &quot;Mac Users.&quot; More specifically the threat actors are targeting a very specific cohort within the Mac user ecosystem - enterprise employees using their enterprise-issued Mac system, crypto traders, and the financially well-off. The threat actors are not interested in the general population, average user in any city or village the world over.For one, the average home user is not going to install the Homebrew Mac OS package manager on their system. They don&#039;t know what it is nor do they care. So beginning with that fact alone it is simple to deduce that the threat actors are not throwing a malicious blanket at home users. They are targeting a very specific cohort within the Mac User ecosystem.[URL unfurl=&quot;true&quot;]https://www.bitdefender.com/en-us/blog/hotforsecurity/criminals-use-fake-mac-homebrew-google-ads-in-new-malicious-campaign[/URL]The ones conducting the &quot;Spray-and-Pray&quot; campaigns are the junior cyber criminal script kiddies and those learning (practicing) to become better cyber criminals. Then there are the organized crime &quot;bottom feeders&quot; that launch low-effort malware-as-a-service campaigns. That segment is a small one targeting general home users. The days of &quot;Let&#039;s attack the entire world because it is a numbers game&quot; has been over for a very long time. A few still do it, but it is not the modus operandi of the well resourced and capable cyber criminal underground for many years.The one area that continues to target any user are PUPs/PUAs. Those are far more of a problem than malware and malicious campaigns since 2010 or even a bit earlier. For one they are far easier to foist onto the global population, and two they do not cross into illegal territory (at least the ones not deliberately designed and intended to infect systems).</blockquote>

[QUOTE="bazang, post: 1118001, member: 114717"] No house of cards. No tricking anybody. I have made statements of fact. Here is an example of a malicious campaign that the cybersecurity news reports as targeting "Mac Users." What the article author fails to mention - or further specify and clarify - is who is actually the intended target. He states "Mac Users." But the fact is that it is a subset of all "Mac Users." More specifically the threat actors are targeting a very specific cohort within the Mac user ecosystem - enterprise employees using their enterprise-issued Mac system, crypto traders, and the financially well-off. The threat actors are not interested in the general population, average user in any city or village the world over. For one, the average home user is not going to install the Homebrew Mac OS package manager on their system. They don't know what it is nor do they care. So beginning with that fact alone it is simple to deduce that the threat actors are not throwing a malicious blanket at home users. They are targeting a very specific cohort within the Mac User ecosystem. [URL unfurl="true"]https://www.bitdefender.com/en-us/blog/hotforsecurity/criminals-use-fake-mac-homebrew-google-ads-in-new-malicious-campaign[/URL] The ones conducting the "Spray-and-Pray" campaigns are the junior cyber criminal script kiddies and those learning (practicing) to become better cyber criminals. Then there are the organized crime "bottom feeders" that launch low-effort malware-as-a-service campaigns. That segment is a small one targeting general home users. The days of "Let's attack the entire world because it is a numbers game" has been over for a very long time. A few still do it, but it is not the modus operandi of the well resourced and capable cyber criminal underground for many years. The one area that continues to target any user are PUPs/PUAs. Those are far more of a problem than malware and malicious campaigns since 2010 or even a bit earlier. For one they are far easier to foist onto the global population, and two they do not cross into illegal territory (at least the ones not deliberately designed and intended to infect systems). [/QUOTE]

Verification