Incident Education: Sales Ammo for the IT Arsenal

The report describes an unsealed U.S. indictment linking the GozNym cybercrime group to a banking-malware campaign that inflicted roughly $100 million in losses by infecting SMBs with GozNym to gain access to online bank accounts; it lists 13 victim organizations across multiple industries, refers readers to the indictment pages for each case, and recommends defensive controls such as MFA, breach detection, anti-phishing, DNS filtering, and antivirus.