SecureList

FEBRUARY 16, 2023

Short-lived phishing sites often offered to see the premieres before the eagerly awaited movie or television show was scheduled to hit the screen. At the beginning of that year, we still observed phishing attacks that used the themes of infection and prevention as the bait. Others offered the coveted Green Pass without vaccination.

Phishing 100

Phishing Scams Accountability Energy and Utilities 100

SecureWorld News

MAY 2, 2022

Another day, another dollar, another phishing scam that'll make you holler. Department of Justice (DOJ) recently announced the conviction of a California man who stole more than $23 million from the Department of Defense (DOD) through a complex phishing scam. On October 10, 2018, the DOD transferred $23.5

Phishing 82

Phishing Computers and Electronics Banking Scams 82

Malwarebytes

NOVEMBER 1, 2022

LinkedIn knows it has a problem with bots and fake accounts, and has acknowledged this on more than one occasion. For years, it has been aware of spam, fake job offers, phishing, fraudulent investments, and (at times) malware, and has been trying to combat those issues. What's new? The "About this profile" feature.

Accountability 98

Accountability Cryptocurrency Education Technology 98

Krebs on Security

FEBRUARY 26, 2023

But it’s worth revisiting how this group typically got in to targeted companies: By calling employees and tricking them into navigating to a phishing website. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. In a filing with the U.S.

Hacking 275

Hacking Social Engineering Phishing Scams 275

Hacker Combat

SEPTEMBER 6, 2021

Hackers took advantage of the mishap to gain unauthorized access to email accounts and lots of customer’s data was exposed. During that timeframe, unapproved third parties gained unauthorized access into over 60 email accounts hosted in the cloud belonging to Cetera Employees. Often, hackers use phishing emails to target employees.

Accountability 100

Accountability Hacking Financial Services Data breaches 100

Security Affairs

JUNE 4, 2020

Hackers hijacked one of the domains of the Japanese cryptocurrency exchange Coincheck and used it for spear-phishing attacks. The Japanese cryptocurrency exchange Coincheck announced that threat actors have accessed their account at the Oname.com domain registrar and hijacked one of its domain names. Pierluigi Paganini.

Accountability 122

Accountability Phishing DNS Cryptocurrency 122

Security Affairs

AUGUST 5, 2019

A crook involved in a spear phishing scheme and that was in Kenya is facing up to 20 years in the US federal prison for stealing thousands of dollars from US universities. Amil Hassan Raage, 48, pleaded guilty last week in a southern California court to fraudulently receiving almost $750,000 as part of a spear phishing scheme.

Phishing 111

Phishing Banking Advertising Accountability 111

SecureList

FEBRUARY 15, 2021

The Kaspersky Anti-Phishing component blocked 434,898,635 attempts at accessing scam sites. The most frequent targets of phishing attacks were online stores (18.12 Contact us to lose your money or account! The contact phone trick was heavily used both in email messages and on phishing pages. Agentb malware family.

Phishing 142

Phishing Malware Scams Accountability 142

SiteLock

AUGUST 27, 2021

However, research indicates that phishing attacks are the most common threat — by far. Microsoft’s “ Security Intelligence Report, Volume 24 ” shows a 250% increase in the number of phishing emails and attacks since 2018. To avoid becoming a victim, it’s critical to prevent phishing attacks.

Phishing 98

Phishing Passwords Education Password Management 98

Krebs on Security

AUGUST 30, 2022

A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices. Image: Cloudflare.com. 2, and Aug.

Mobile 298

Mobile Phishing Authentication Accountability 298

Krebs on Security

OCTOBER 31, 2023

The top-level domain for the United States — US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. domains as among the most prevalent in phishing attacks over the past year. As far back as 2018, Interisle found.US

Phishing 276

Phishing Telecommunications Malware Scams 276

Security Affairs

MAY 23, 2024

A previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’ has been targeting military and government entities since 2018. Bitdefender researchers discovered a previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’ that has been targeting military and government entities since 2018.

Malware 123

Malware Accountability Phishing Data collection 123

SecureList

FEBRUARY 9, 2022

Our Anti-Phishing system blocked 253 365 212 phishing links. Safe Messaging blocked 341 954 attempts to follow phishing links in messengers. The subject of investments gained significant relevance in 2021, with banks and other organizations actively promoting investment and brokerage accounts. Trends of the year.

Phishing 70

Phishing Scams Accountability Banking 70

Krebs on Security

AUGUST 19, 2020

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. The employee phishing page bofaticket[.]com. Image: urlscan.io.

Phishing 359

Phishing VPN Social Engineering Media 359

Security Affairs

MARCH 17, 2019

Threat actors targeted Office 365 and G Suite cloud accounts using the IMAP protocol to bypass multi-factor authentication (MFA). Over the past months, threat actors have targeted Office 365 and G Suite cloud accounts using the IMAP protocol to bypass multi-factor authentication (MFA). ” reads the study published by Proofpoint.

Accountability 112

Accountability Phishing Authentication Passwords 112

SiteLock

AUGUST 27, 2021

This is the reality for many website owners, and now more than ever, they need to be on alert for cyberattacks in 2018. In Q2 2017, backdoors accounted for 23 percent of malware files. Phishing Kits. Now imagine if that website was your website, and you had no idea it was harming your visitors.

Malware 52

Malware Engineering Phishing Accountability 52

Security Affairs

APRIL 8, 2019

Bahrain, 08.04.2019 – Group-IB, an international company that specializes in preventing cyberattacks , and NGN International, a global system integrator, analyzed cybersecurity landscape in Gulf countries in 2018. According to Group-IB’s annual Hi-Tech Crime Trends 2018 report, on average, from June 2017 to August 2018, the details of 1.8

Artificial Intelligence 89

Artificial Intelligence Government Banking Advertising 89

Digital Shadows

AUGUST 17, 2021

What is Phish(ing)? But, never mind the dozens of other reports and white papers about phishing that come out every year from security industry leaders, let’s take a look at the 2021 Verizon DBIR. Going back a bit, it was also the top attack vector in 2020, 2019, 2018, 2017, 2016, and well, hopefully, you get the picture.

Phishing 52

Phishing Accountability Social Engineering Mobile 52

Krebs on Security

AUGUST 30, 2019

But when accounts at those CRM providers get hacked or phished, the results can be damaging for both the client’s brand and their customers. Here’s a look at a recent CRM-based phishing campaign that targeted customers of Fortune 500 construction equipment vendor United Rentals. Stamford, Ct.-based

Phishing 217

Phishing Marketing Accountability DNS 217

Security Affairs

APRIL 15, 2022

Threat actors are targeting Ukrainian government organizations with exploits for XSS vulnerabilities in Zimbra Collaboration Suite (CVE-2018-6882). Ukraine’s CERT (CERT-UA) warns of threat actors that are targeting government organizations with exploits for XSS vulnerabilities in Zimbra Collaboration Suite ( CVE-2018-6882 ).

Phishing 98

Phishing Government Accountability Hacking 98

Malwarebytes

AUGUST 16, 2023

username and your Discord ID, your email-address, your billing address, and a salted and hashed password if you signed up in 2018 or earlier. (In In 2018 discord.io In the My Account tab, scroll down and click Enable Two-Factor Auth. Some forms of two-factor authentication (2FA) can be phished just as easily as a password.

Data breaches 98

Data breaches Authentication Passwords Phishing 98

SiteLock

AUGUST 27, 2021

In fact, website attacks increased 14 percent in Q1 2018 compared to Q4 2017 as cybercriminals set their sights on independent websites and small businesses. The SiteLock Website Security Insider Q1 2018 analyzes data from over 10 million websites to pinpoint the threats website owners need to be aware of.

Small Business 52

Small Business Media Risk Data breaches 52

Security Affairs

DECEMBER 1, 2019

Over 90 percent of the users identified by Google were targeted via “credential phishing emails” that attempt to trick victims into providing their password or other account credentials to hijack their Google account. It doesn’t mean that hackers successfully compromised their Google accounts.

Phishing 145

Phishing Accountability Advertising Cyber Attacks 145

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020. The affected JD Sports group brands are JD, Size?,

Data breaches 98

Data breaches Retail Passwords Scams 98

Spinone

MARCH 10, 2019

There are constantly new headlines, blog posts, statistics, and other information pointing to the fact that security breaches, malware, ransomware, data leak events, phishing and other security concerns are not going away. The past year in 2018, ransomware remained an ever-growing threat.

Ransomware 53

Ransomware Energy and Utilities Backups Encryption 53

SecureList

FEBRUARY 23, 2022

The research in this report is a continuation of our previous annual financial threat reports ( 2018 , 2019 and 2020 ), providing an overview of the latest trends and key events across the threat landscape. Phishing: In 2021, 8.2% of users were hit by phishing. of all phishing schemes in 2021, compared to the 11.1%

Banking 107

Banking Phishing Cryptocurrency Malware 107

Malwarebytes

OCTOBER 8, 2021

Discord, a group text chat/VoiP app of choice for many gaming communities, is having a bit of trouble with phishing links. This week it’ll be a bot promoting a “red hot” offer from 2018. They could stand to lose their gaming accounts, their logins for other services, some money, or perhaps a combination of all 3.

Scams 129

Scams Phishing Accountability Passwords 129

Security Affairs

APRIL 6, 2023

The attack chain associated with ARCHIPELAGO starts with phishing emails that embed malicious links. Upon clicking the link, the recipient is redirected to a phishing page that masquerades as a login prompt. Upon clicking the link, the recipient is redirected to a phishing page that masquerades as a login prompt.

Phishing 98

Phishing Media Passwords Malware 98

Security Affairs

JANUARY 2, 2020

Kaspersky researchers found over 30 fraudulent websites and social media profiles disguised as official movie accounts (the actual number of these sites may be much higher) that supposedly distribute free copies of the latest film in the franchise.” ” reads a press release published by Kasperky. Pierluigi Paganini.

Phishing 103

Phishing Malware Advertising Media 103

Security Affairs

JUNE 24, 2020

The CryptoCore group, aks Crypto-gang, “Dangerous Password”, and “Leery Turtle” has been active since 2018. “While the group’s key infiltration vector to the exchange is usually through spear-phishing against the corporate network, the executives’ personal email accounts are the first to be targeted.”

Cryptocurrency 108

Cryptocurrency Phishing Accountability Passwords 108

Security Affairs

SEPTEMBER 15, 2022

The FBI also reported one attack in which the threat actors changed victims’ direct deposit information to a bank account under their control and redirected $3.1 “Cyber criminals are compromising user login credentials of healthcare payment processors and diverting payments to accounts controlled by the cyber criminals.

Healthcare 98

Healthcare Social Engineering Accountability Passwords 98

Krebs on Security

AUGUST 16, 2018

An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. On June 11, 2017, Terpin’s phone went dead.

Mobile 234

Mobile Cryptocurrency Accountability Authentication 234

CyberSecurity Insiders

JULY 14, 2021

Instagram, the subsidiary of Facebook company, has announced that it is going to roll out an additional security feature that allows its users to review their login info, data related to other accounts that share the login info, and recovery contact information.

Accountability 109

Accountability Passwords Phishing Authentication 109

Krebs on Security

MARCH 17, 2021

Wondering whether he might receive email communications to that address if he registered the domain, Vegh snapped it up for a few dollars, set up a catch-all email account for it, and waited. “My accounts were hacked and if any funding is gone your [sic] sued from me and federal trade commission,” one wrote.

Banking 311

Banking Accountability Software Mobile 311

Krebs on Security

SEPTEMBER 6, 2021

The Manipulaters’ core brand in the underground is a shared cybercriminal identity named “ Saim Raza ,” who for the past decade across dozens of cybercrime sites and forums has peddled a popular spamming and phishing service variously called “ Fudtools ,” “ Fudpage ,” “ Fudsender ,” etc.

Software 244

Software Phishing Cybercrime Accountability 244

Google Security

AUGUST 9, 2021

In 2018, Google introduced the Titan Security Key as a direct defense against credential phishing. Phishing occurs when an attacker tries to trick you into giving them your username and password, and it remains one of the easiest and most successful ways of breaching accounts online.

Mobile 124

Mobile Phishing Firmware Retail 124

Spinone

MARCH 18, 2019

As we look at the past year of 2018, it is all too easy to see that data breach or leak of sensitive information is not a problem that is going away anytime soon. Let’s take a look at the top Cloud Data Breaches in 2018 and see how they were carried out, what data was leaked, and the weakness that was exposed by the breach.

Data breaches 53

Data breaches Computers and Electronics Accountability Technology 53