article thumbnail

Taking on the Next Generation of Phishing Scams

Google Security

Posted by Daniel Margolis, Software Engineer, Google Account Security Team Every year, security technologies improve: browsers get better , encryption becomes ubiquitous on the Web , authentication becomes stronger. But phishing persistently remains a threat (as shown by a recent phishing attack on the U.S.

Phishing 107
article thumbnail

Discord Shame channel goes phishing

Malwarebytes

sorry if this is a misunderstanding but i do not wanna take risks with having creeps on my friendslist. Visitors to the channel are asked to log in via a QR code, and users of Discord are reporting losing access to their account after taking this step. Tips to keep your Discord account secure.

Phishing 113
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

U.S. Energy Company Targeted by QR Code Phishing Campaign

SecureWorld News

In May 2023, a phishing campaign was launched that targeted a major U.S. The emails in the campaign purported to be from Microsoft, and they claimed that the recipient needed to update their account security settings or activate two-factor authentication (2FA)/multi-factor authentication (MFA) within 72 hours.

article thumbnail

Final Fantasy 14 players targeted by QR code phishing

Malwarebytes

What’s being talked about at the moment is the QR code-centric phishing attack. How the QR code phish attack works. Many of the accounts sending these messages appear to have been hijacked themselves. Once the account is stolen, the scammers are free to use it to continue the phishing antics.

article thumbnail

Twitter's Cyber Attack and Takeover: It Was Spear Phishing

SecureWorld News

In an update about the incident , Twitter confirmed that the attack occurred through a phone spear phishing effort to customer support: " The social engineering that occurred on July 15, 2020, targeted a small number of employees through a phone spear phishing attack. Spear phishing: what security experts are saying.

article thumbnail

Device Security Beyond Enrollment: Securing the Self-Service Portal

Duo's Security Blog

In this blog we’ll share best practices for Duo admins to continue reap the benefits of self-service after enrollment while keeping their user accounts secure. What’s the risk? Once they do so, they gain persistent access to the account. Why use the Self-Service Portal?

article thumbnail

Podcast Episode 135: The Future of Passwords with Google Account Security Chief Guemmy Kim

The Security Ledger

In this week’s episode (#135): we continue our series on the future of Passwords as we are joined by Guemmy Kim, a group product manager at Google in charge of that company’s account security initiatives. ?. Guemmy and I talk about Google’s fast evolving security program to protect user passwords and data. Phish talk.