SecureList

FEBRUARY 15, 2021

The Kaspersky Anti-Phishing component blocked 434,898,635 attempts at accessing scam sites. The most frequent targets of phishing attacks were online stores (18.12 Contact us to lose your money or account! The contact phone trick was heavily used both in email messages and on phishing pages. Agentb malware family.

Phishing 136

Phishing Malware Scams Accountability 136

Security Affairs

APRIL 11, 2020

Crooks are using a fake Cisco “critical security advisory” in a new phishing campaign aimed at stealing victims’ Webex credentials. The Cofense’s phishing defense center has uncovered an ongoing phishing campaign that uses a Cisco security advisory related to a critical vulnerability as a lure. ” concludes the experts.

Phishing 139

Phishing Advertising Healthcare Cyber Attacks 139

SecureWorld News

SEPTEMBER 24, 2020

The National Institute of Standards and Technology (NIST) recently developed a new method that will help prevent organizations and their employees from falling victim to phishing cyberattacks, which it calls the Phish Scale. A tool like the Phish Scale could be very useful for organizations in the fight against phishing.

Phishing 95

Phishing CISO Cybercrime Technology 95

Krebs on Security

AUGUST 2, 2018

A story published here on July 12 about a new sextortion-based phishing scheme that invokes a real password used by each recipient has become the most-read piece on KrebsOnSecurity since this site launched in 2009. And with good reason — sex sells (the second most-read piece here was my 2015 scoop about the Ashley Madison hack ).

Phishing 142

Phishing Scams Passwords Password Management 142

Security Affairs

JUNE 4, 2020

Hackers hijacked one of the domains of the Japanese cryptocurrency exchange Coincheck and used it for spear-phishing attacks. The Japanese cryptocurrency exchange Coincheck announced that threat actors have accessed their account at the Oname.com domain registrar and hijacked one of its domain names. Pierluigi Paganini.

Accountability 94

Accountability Phishing DNS Cryptocurrency 94

Hacker Combat

SEPTEMBER 6, 2021

Hackers took advantage of the mishap to gain unauthorized access to email accounts and lots of customer’s data was exposed. During that timeframe, unapproved third parties gained unauthorized access into over 60 email accounts hosted in the cloud belonging to Cetera Employees. Often, hackers use phishing emails to target employees.

Accountability 100

Accountability Hacking Financial Services Data breaches 100

Security Affairs

NOVEMBER 25, 2018

Researchers at AppRiver uncovered a very trivial phishing campaign targeting the streaming service Spotify, anyway, it is important to share info about it. Security researchers at AppRiver uncovered a phishing campaign targeting the popular streaming service Spotify. giving the attacker the ability to hijack the account.”

Phishing 85

Phishing Accountability Advertising Passwords 85

Security Affairs

JULY 16, 2020

The social media platform Twitter suffered one of the biggest cyberattacks in its history, multiple high-profile accounts were hacked. All the accounts were compromised simultaneously and threat actors used them to promote a cryptocurrency scam. “You send $1,000, I send you back $2,000.”

Accountability 99

Accountability Scams Hacking Social Engineering 99

Security Affairs

AUGUST 5, 2019

A crook involved in a spear phishing scheme and that was in Kenya is facing up to 20 years in the US federal prison for stealing thousands of dollars from US universities. Amil Hassan Raage, 48, pleaded guilty last week in a southern California court to fraudulently receiving almost $750,000 as part of a spear phishing scheme.

Phishing 97

Phishing Banking Advertising Accountability 97

Security Affairs

MARCH 17, 2019

Threat actors targeted Office 365 and G Suite cloud accounts using the IMAP protocol to bypass multi-factor authentication (MFA). Over the past months, threat actors have targeted Office 365 and G Suite cloud accounts using the IMAP protocol to bypass multi-factor authentication (MFA). ” reads the study published by Proofpoint.

Accountability 111

Accountability Phishing Authentication Passwords 111

Security Affairs

OCTOBER 10, 2020

In March, Google shared data on alerts related to state-sponsored attacks, the tech giant revealed that it issued almost 40,000 alerts of state-sponsored phishing or malware attacks to its users during 2019. The security key used during the registration process will be required anytime the users will sign into their accounts on new devices.

Accountability 72

Accountability Malware Phishing Advertising 72

Security Affairs

DECEMBER 25, 2018

Amnesty International warns of threat actors that are launching phishing attacks aimed at bypassing Gmail, Yahoo 2FA at scale. Attackers are using this tactic to break into Gmail and Yahoo accounts in large scale attacks. In one campaign, threat actors targeted accounts on popular secure email services, such as Tutanota and ProtonMail.

Phishing 95

Phishing Social Engineering Authentication Accountability 95

Security Affairs

APRIL 25, 2019

Experts at Proofpoint discovered that free code repositories on GitHub have been abused since at least 2017 to host phishing websites. Researchers at Proofpoint reported that crooks are abusing free code repositories on GitHub to host phishing websites and bypass security defenses. ” reads the post published by Proofpoint.

Phishing 86

Phishing Advertising Accountability Cybercrime 86

Security Affairs

FEBRUARY 8, 2019

Crooks leverage Google Translate service as camouflage on mobile browsers in a phishing campaign aimed at stealing Google account and Facebook credentials. These phishing emails pose as alerts sent by Google that inform users that their accounts were accessed from a new Windows device. Pierluigi Paganini.

Phishing 84

Phishing Mobile Security Intelligence Advertising 84

Security Affairs

AUGUST 19, 2019

Phishing is one of the oldest methods of cyberattacks. Types of Phishing Attacks. There are different types of phishing attacks and each is deceiving and manipulative in its own unique way. The most common type is phishing is carried out through fraudulent email receptionist. Another targeted phishing practice is Whaling.

Phishing 88

Phishing Accountability Authentication Passwords 88

Security Affairs

APRIL 17, 2020

Google says that the Gmail malware scanners have blocked around 18 million phishing and malware emails using COVID-19 lures in just one week. Google announced that its anti-malware solutions implemented to defend its Gmail users have blocked around 18 million phishing and malware emails using COVID-19 lures within the last seven days.

Phishing 116

Phishing Malware Government Small Business 116

Security Affairs

FEBRUARY 17, 2019

Security experts at Myki have recently discovered a new phishing campaign that could deceive even most tech-savvy users. Crooks are distributing links to blogs and services that display users “login using Facebook account” to read an exclusive article or purchase a discounted product. SecurityAffairs – phishing, Facebook).

Phishing 96

Phishing Advertising Accountability Authentication 96

Security Affairs

APRIL 30, 2020

Group-IB uncovered a new sophisticated phishing campaign, tracked as PerSwaysion, against high-level executives of more than 150 companies worldwide. . PerSwaysion is a highly-targeted phishing campaign. New round of phishing attempts leveraging current victim’s account usually takes less than 24 hours. Gone in 24 Hours.

Phishing 95

Phishing Accountability Financial Services Cloud Migration 95

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Secure web- phishing. In the light of global pandemic and the businesses’ dive into online world, the share of this phishing category increased to remarkable 46 percent.

Phishing 103

Phishing Ransomware Spyware Banking 103

Security Affairs

JULY 22, 2019

Last week, hackers published a list of Discord credentials (email addresses/passwords) that were allegedly phished from the users of the gaming chat platform. Last week, a group of hackers published a list of Discord login credentials (email addresses and passwords) that were allegedly phished from the users of the gaming chat platform.

Phishing 78

Phishing Data breaches Passwords Advertising 78

Krebs on Security

SEPTEMBER 6, 2021

In May 2015, KrebsOnSecurity briefly profiled “ The Manipulaters ,” the name chosen by a prolific cybercrime group based in Pakistan that was very publicly selling spam tools and a range of services for crafting, hosting and deploying malicious email. Also we are running business since 2006.”

Software 239

Software Phishing Cybercrime Accountability 239

Digital Shadows

AUGUST 17, 2021

What is Phish(ing)? But, never mind the dozens of other reports and white papers about phishing that come out every year from security industry leaders, let’s take a look at the 2021 Verizon DBIR. Why should I care about Phish? The reason why phishing is still reigning supreme?

Phishing 52

Phishing Accountability Social Engineering Mobile 52

Security Affairs

DECEMBER 26, 2023

The Carbanak gang was first discovered by Kaspersky Lab in 2015, the group has stolen at least $300 million from 100 financial institutions. The threat actors used sophisticated phishing techniques against bank employees. Imposters in November included the CRM platform HubSpot, data management software Veeam, and account tool Xero.”

Malware 116

Malware Ransomware Banking Healthcare 116

CyberSecurity Insiders

AUGUST 1, 2022

Security research carried out by CloudSEK has found that over 3000+ mobile applications were exposing Twitter’s API keys, thus providing access to twitter accounts fraudulently. Now, the employee is no more linked to the social media giant and will face the trial for indulging in fraudulent practices in 2015.

Mobile 120

Mobile Media Accountability Cryptocurrency 120

Security Affairs

APRIL 9, 2020

Group-IB’s CERT-GIB analyzed hundreds of coronavirus -related phishing emails and discovered top malware strains in COVID-19 campaigns. Group-IB’s Computer Emergency Response Team ( CERT-GIB ) analyzed hundreds of coronavirus-related phishing emails between February 13 and April 1, 2020. Spyware: the most likely COVID-19 payload.

Phishing 106

Phishing Malware Spyware DDOS 106

Security Affairs

FEBRUARY 24, 2020

Slickwraps has disclosed a data breach that impacted over 850,000 user accounts, data were accidentally exposed due to security vulnerabilities. Lynx0x00’s Medium and Twitter accounts have mysteriously vanished but, fortunately, the Internet never truly forgets. ” reported Slashgear. Pierluigi Paganini.

Accountability 93

Accountability Data breaches Passwords Advertising 93

Security Affairs

APRIL 20, 2019

Google this week announced that it is going to block login attempts from embedded browser frameworks to prevent man-in-the-middle (MiTM) phishing attacks. “However, one form of phishing, known as “ man in the middle ” (MITM), is hard to detect when an embedded browser framework (e.g., Pierluigi Paganini.

Phishing 81

Phishing Authentication Advertising Hacking 81

Security Affairs

JANUARY 18, 2024

The ColdRiver APT (aka “ Seaborgium “, “Callisto”, “Star Blizzard”, “TA446”) is a Russian cyberespionage group that has been targeting government officials, military personnel, journalists and think tanks since at least 2015. In November 2022, TAG spotted COLDRIVER sending targets benign PDF documents from impersonation accounts.

Phishing 95

Phishing Malware Encryption Accountability 95

Security Affairs

OCTOBER 5, 2020

The hackers carried out spear-phishing attacks against the Swiss universities in an attempt of tricking its employees into providing their access data. The SonntagsZeitung also added that hackers attempted to breach the University of Zurich, but the employees at the university recognised the phishing attempts and neutralized them.

Advertising 145

Advertising Phishing Cybercrime Hacking 145

Security Affairs

DECEMBER 7, 2023

The nation-state actor is carrying out spear-phishing attacks for cyberespionage purposes. The Callisto APT group (aka “ Seaborgium “, “Star Blizzard”, “ ColdRiver” , “TA446”) targeted government officials, military personnel, journalists and think tanks since at least 2015.

DNS 92

DNS Government Accountability Phishing 92

Security Affairs

DECEMBER 1, 2019

Over 90 percent of the users identified by Google were targeted via “credential phishing emails” that attempt to trick victims into providing their password or other account credentials to hijack their Google account. It doesn’t mean that hackers successfully compromised their Google accounts. Pierluigi Paganini.

Phishing 127

Phishing Accountability Advertising Cyber Attacks 127

Krebs on Security

AUGUST 8, 2023

Faced with customers trying to use WormGPT to create ransomware and phishing scams, the 23-year-old Portuguese programmer who created the project now says his service is slowly morphing into “a more controlled environment.” ” SlashNext asked WormGPT to compose this BEC phishing email. . Image: SlashNext.

Malware 212

Malware Cybercrime Advertising Phishing 212

Security Affairs

APRIL 12, 2020

The archive included credentials for Zoom accounts belonging to organizations in various industries, including banking, consultancy, healthcare software companies. While some of the accounts “only” included an email and password, others included meeting IDs, names and host keys.” Pierluigi Paganini.

Healthcare 145

Healthcare Phishing Accountability Banking 145

Security Affairs

JANUARY 16, 2019

Security researchers at Check Point have discovered several flaws in the popular game Fortnite that could be exploited to takeover gamers’account. One of the flaws is an OAuth account takeover vulnerability that could have allowed a remote attacker to takeover gamer accounts tricking players into clicking a specially crafted link.

Accountability 67

Accountability Authentication Advertising Phishing 67

Schneier on Security

MAY 5, 2020

Unlike most of the shady apps found in Play Store malware, Kaspersky's researchers say, PhantomLance's hackers apparently smuggled in data-stealing apps with the aim of infecting only some hundreds of users; the spy campaign likely sent links to the malicious apps to those targets via phishing emails. "In

Malware 297

Malware Spyware Phishing Government 297

Security Affairs

MARCH 18, 2019

million phishing ads for violation of its policies. million phishing ads. Google also revealed it was able to identify threat actors behind bad ads with the help of improved machine learning technology, it terminated nearly one million bad advertiser accounts. phishing ads appeared first on Security Affairs.

Phishing 82

Phishing Advertising Scams Cryptocurrency 82

Security Affairs

MARCH 27, 2020

Google announced to have warned users of almost 40,000 alerts of state-sponsored phishing or malware attacks during 2019. Google shared data on alerts related to state-sponsored attacks, the tech giant revealed that it issued almost 40,000 alerts of state-sponsored phishing or malware attacks to its users during 2019.

Phishing 117

Phishing Accountability Advertising Malware 117