Recent LofyLife campaign steals tokens and infects client files to monitor various user actions, such as log-ins, password changes and payment methods.
The findings of a Coalfire-CyberRisk Alliance study have implications for the cloud because public cloud providers are often the first level of exposure.