Information Security – Sep 18 Current Threats & Landscape Superdrug Ransom demand - believed to be from cyber criminals, claiming they had obtained customer information. Superdrug stated that they could not find any evidence of a data breach but now believe that the cyber criminals accessed their customer accounts using credentials from other websites. Marap - a new piece of malware using phishing emails to infect users have featured malicious attachments like Word documents or PDF files. To date, Marap has mostly targeted financial institutions. Hermes 2.1 ransomware - , an evolution of ransomware used during the 2017 attempted theft of $60 million from a Taiwan-based bank. The victim receives an “Invoice Due” email – an invoice is attached as a Word document, urges the victim to complete the transaction quickly. The document is protected by a password, contained within the email, giving the campaign added credibility.