Google now allows high-risk users to enroll in its Advanced Protection Program using a single passkey, utilizing biometric authentication on Pixel phones or iPhones. Previously, two physical security keys were required. The program is designed for individuals such as political campaign workers or journalists who have sensitive information. Users can set up the program by visiting Google’s Advanced Protection Program page and choosing the passkey option. Passkeys replace traditional passwords and rely on device authentication methods like Face ID or fingerprint sensors.
Researchers have discovered a new ransomware group called Volcano Demon that targets companies in the manufacturing and logistics industries. Unlike other groups, Volcano Demon uses phone calls to intimidate and negotiate payments with victims. They employ a double extortion technique, encrypting data after exfiltrating it. The group is challenging to track and has conducted at least two successful attacks. It is unclear if they operate independently or are affiliated with a known ransomware group.
Why do we care?
Two new tactics – the ability to lock down highly sensitive users, and the new tactic of leveraging phone calls for intimidation.