Security Affairs

FEBRUARY 3, 2025

The Russian-speaking Crazy Evil group runs over 10 social media scams, tricking victims into installing StealC, AMOS, and Angel Drainer malware. Security experts identified six Crazy Evil’s subteams, called AVLAND, TYPED, DELAND, ZOOMLAND, DEFI, and KEVLAND, which are running targeted scams for specific victim profiles.

Scams 86

Scams Media Cryptocurrency Cybercrime 86

Krebs on Security

NOVEMBER 14, 2024

That investigation detailed how the 38-year-old Shefel adopted the nickname Rescator while working as vice president of payments at ChronoPay , a Russian financial company that paid spammers to advertise fake antivirus scams, male enhancement drugs and knockoff pharmaceuticals. “I’m also godfather of his second son.”

Advertising 274

Advertising Retail Cryptocurrency Cybercrime 274

Krebs on Security

JANUARY 7, 2025

Before we get to the Apple scam in detail, we need to revisit Tony’s case. This domain was featured in a writeup from February 2024 by the security firm Lookout , which found it was one of dozens being used by a prolific and audacious voice phishing group it dubbed “ Crypto Chameleon.” “ Annie.”

Phishing 338

Phishing Cryptocurrency Accountability Social Engineering 338

Security Affairs

NOVEMBER 27, 2024

. “Operation Serengeti (2 September – 31 October) targeted criminals behind ransomware, business email compromise (BEC), digital extortion and online scams – all identified as prominent threats in the 2024 Africa Cyber Threat Assessment Report.” Nigerian authorities arrested a man behind a $300K crypto scam.

Scams 122

Scams Cybercrime Ransomware Cyber threats 122

SecureList

MARCH 25, 2025

Key findings Phishing Banks were the most popular lure in 2024, accounting for 42.58% of financial phishing attempts. Amazon Online Shopping was mimicked by 33.19% of all phishing and scam pages targeting online store users in 2024. Cryptocurrency phishing saw an 83.37% year-over-year increase in 2024, with 10.7

Phishing 77

Phishing Banking Scams Mobile 77

Security Affairs

DECEMBER 2, 2024

Operation HAECHI V (July-Nov 2024) targeted cyber frauds like phishing, romance scams, sextortion, investment fraud, online gambling, BEC, and e-commerce fraud. The authorities have warned of “USDT Token Approval Scam” that allows scammers access to the victims’ cryptocurrency wallets and make unauthorized transactions.

Cryptocurrency 129

Cryptocurrency Phishing Scams Cybercrime 129

Krebs on Security

NOVEMBER 21, 2024

The targeted SMS scams asked employees to click a link and log in at a website that mimicked their employer’s Okta authentication page. In January 2024, KrebsOnSecurity broke the news that Urban had been arrested in Florida in connection with multiple SIM-swapping attacks. Click to enlarge.

Identity Theft 268

Identity Theft Phishing Cryptocurrency Accountability 268

Malwarebytes

OCTOBER 15, 2024

Political ads could be hiding online scams, many people feel, and the election, they say, will likely fall victim to some type of “cyber interference.” For this research, Malwarebytes conducted a pulse survey of its newsletter readers between September 5 and 16, 2024, via the Alchemer Survey platform.

Scams 139

Scams Identity Theft Cybercrime Accountability 139

SecureWorld News

MARCH 18, 2025

In recent months, a sophisticated scam has emerged, targeting drivers across the United States with fraudulent text messages about unpaid road tolls. Smishing scams like these follow a predictable yet highly effective, nefarious behavioral blueprintleveraging urgency, impersonation, and fear to manipulate victims into compliance.

Scams 85

Scams Mobile Phishing Education 85

Security Affairs

APRIL 7, 2025

A 20-year-old man linked to the Scattered Spider cybercrime group has pleaded guilty to charges filed in Florida and California. ” Source News4Jax The charges relate to his alleged role in the Scattered Spider cybercrime group (also known as UNC3944 , 0ktapus ). .” In January 2024, U.S. ” reported News4Jax.

Cybercrime 68

Cybercrime Identity Theft Social Engineering Hacking 68

The Hacker News

AUGUST 6, 2024

INTERPOL said it devised a "global stop-payment mechanism" that helped facilitate the largest-ever recovery of funds defrauded in a business email compromise (BEC) scam. The development comes after an unnamed commodity firm based in Singapore fell victim to a BEC scam in mid-July 2024.

Scams 136

Scams Cybercrime 136

Security Affairs

MARCH 29, 2025

million in USDT stolen through ‘romance baiting’ scams, where victims are tricked into fake investments promising high returns. in USDT (Tether) linked to a ‘romance baiting’ scam. The scam involves emotional manipulation, leaving victims financially devastated and reluctant to report the fraud.

Scams 111

Scams Cryptocurrency Media Hacking 111

SecureList

DECEMBER 16, 2024

In 2024, our expert observations indicate that commercial advertising for these cryptors have indeed gained momentum. Verdict: prediction fulfilled “Loader” malware services will continue to evolve As anticipated, the supply for the “loader” malware family has been constant in 2024.

Marketing 105

Marketing Data breaches Cryptocurrency Malware 105

Security Affairs

NOVEMBER 10, 2024

CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog Canadian authorities arrested alleged Snowflake hacker Android flaw CVE-2024-43093 may be under limited, targeted exploitation July 2024 ransomware attack on the City of Columbus impacted 500,000 people Nigerian man Sentenced to 26+ years in real estate phishing scams Russian (..)

Ransomware 119

Ransomware Cybercrime Phishing Banking 119

Security Affairs

NOVEMBER 17, 2024

CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog Hackers target critical flaw CVE-2024-10914 in EOL D-Link NAS Devices China-linked threat actors compromised multiple telecos and spied on a limited number of U.S.

Cryptocurrency 113

Cryptocurrency Hacking Malware Data breaches 113

Webroot

MARCH 3, 2025

March is a time for leprechauns and four-leaf clovers, and as luck would have it, its also a time to learn how to protect your private data from cybercrime. This month, take advantage of all that NCPW offers, including access to free tools and information that can help you identify and prevent online scams, fraud, and identity theft.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

Penetration Testing

JANUARY 31, 2024

As the tax season rolls in, so does the threat of cybercrime, and leading the charge in 2024 is the infamous TA576 threat actor. Researchers at Proofpoint have unveiled the resurgence of this cybercriminal... The post Proofpoint Exposes TA576’s Tax Season Email Scams appeared first on Penetration Testing.

Scams 109

Scams Penetration Testing Cybercrime Malware 109

Security Affairs

JANUARY 4, 2024

The X account of cybersecurity giant Mandiant was hacked, attackers used it to impersonate the Phantom crypto wallet and push a cryptocurrency scam. Crooks hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam.

Cryptocurrency 135

Cryptocurrency Scams Accountability Hacking 135

Webroot

SEPTEMBER 24, 2024

From ransomware attacks to phishing scams, hackers are becoming more sophisticated. OpenText’s 2024 Threat Hunter Perspective sheds light on what’s coming next and how to protect yourself. Nation-states are teaming up with cybercrime gangs Cybercrime is no longer just about lone hackers. What to expect this fall: U.S.

Cyber threats 116

Cyber threats Small Business Scams Cybercrime 116

Security Affairs

APRIL 10, 2025

SentinelOnes SentinelLabs researchers warn that AkiraBot, a spam framework, targets websites’ chats and contact forms to promote low-quality SEO services, AkiraBot has already targeted more than 400,000 websites and successfully spammed at least 80,000 websites since September 2024.

eCommerce 131

eCommerce Technology DNS Business Services 131

Security Affairs

NOVEMBER 30, 2024

SpyLoan activity has surged, with malicious apps and infected devices increasing over 75% from Q2 to Q3 2024, highlighting their growing mobile threat presence. Similar scams were reported globally. Some apps were suspended by Google from Google Play while others were updated by the developers. ” concludes the report.

Social Engineering 132

Social Engineering Media Mobile Scams 132

SecureList

NOVEMBER 21, 2023

In this article, we will first assess our predictions for 2023 , and then, try to figure out which trends are coming in 2024. We highlighted the growing popularity of cryptocurrencies and anticipated an increase in crypto scams. Open-source backdoored packages A rise in open-source backdoored packages will be a troubling trend in 2024.

Penetration Testing 138

Penetration Testing Banking Ransomware Mobile 138

Krebs on Security

JANUARY 30, 2024

9, 2024, U.S. Indeed, those messages show Sosa/King Bob was obsessed with finding new “ grails ,” the slang term used in some cybercrime discussion channels to describe recordings from popular artists that have never been officially released. In mid-January 2024, several Leaked[.]cx “I got thousands of grails.”

Social Engineering 359

Social Engineering Mobile Cybercrime Passwords 359

Webroot

JUNE 17, 2025

Research shows that the travel and tourism sector ranked third in cyberattacks, with nearly 31% of hospitality organizations experiencing a data breach and a record 340 million people affected by cybercrimes. According to Mastercard, travel-related fraud in 2024 increased by 18% during the summer peak season and 28% in the winter peak season.

VPN 82

VPN Scams Computers and Electronics Phishing 82

SecureList

NOVEMBER 23, 2023

Cybercriminals continued targeting gamers’ accounts filled with valuable in-game items or giving access to games on several devices, and often used in-game currency to lure victims to participate in their scams. Unfortunately, this ambiguity sets the stage for an anticipated increase in charity-related scams in 2024.

VPN 132

VPN Scams Education DDOS 132

SecureList

MAY 27, 2024

Ways to deceive message board users There are two main types of message board scams. This type of fraud is known as scam 1.0 or a buyer scam , because the attacker poses as the seller to deceive the buyer. This is known as scam 2.0 or a seller scam , because the attacker deceives the seller posing as the buyer.

Scams 129

Scams Phishing Accountability Banking 129

Security Boulevard

JUNE 19, 2024

The variety of tactics, from fake lotteries to impersonating officials, demonstrates the broad scope of threats targeting the Paris 2024 Olympic Games. The post Cybercrime Targeting Paris 2024 Olympic Games Gains Steam appeared first on Security Boulevard.

Cybercrime 75

Cybercrime Social Engineering Scams Security Awareness 75

Digital Shadows

NOVEMBER 26, 2024

Key Points Phishing incidents rose during the reporting period (August 1 to October 31, 2024), accounting for 46% of all customer incidents. The proliferation of cybercrime guides on forums and a 7% rise in insider threat content, driven by significant financial incentives, highlight the growing complexity of cybersecurity challenges.

Cyber Attacks 59

Cyber Attacks Phishing Ransomware Cyber Insurance 59

Security Affairs

JANUARY 12, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 60

Malware Scams Phishing Encryption 60

Malwarebytes

MAY 1, 2025

Phishing In phishing scams, cybercriminals trick people and businesses into handing over sensitive information like credit card numbers or login details for vital online accounts. The hackers hijacked the channels to spread cryptocurrency scams, while deleting some of the groups old videos in the process.

Small Business 89

Small Business Cybersecurity Scams Passwords 89

Security Affairs

DECEMBER 10, 2024

The Ministry of Human Resources and Emiratisation (MoHRE) has announced that December 2 and 3, 2024, will be official paid holidays for all private sector employees in the UAE. Notably, some of them were registered between September and November 2024.

Social Engineering 113

Social Engineering Phishing Banking DNS 113

Security Affairs

FEBRUARY 9, 2025

US Justice Department says cybercrime forum allegedly affected 17 million Americans Cybercrime is increasingly complex. What are the risks?

Spyware 62

Spyware Cybercrime Scams Social Engineering 62

Security Affairs

JUNE 15, 2025

CISA adds Wazuh, and WebDAV flaws to its Known Exploited Vulnerabilities catalog Exposed eyes: 40,000 security cameras vulnerable to remote hacking Operation Secure: INTERPOL dismantles 20,000+ malicious IPs in major cybercrime crackdown Over 80,000 servers hit as Roundcube RCE bug gets rapidly exploited A flaw could allow recovery of the phone number (..)

Spyware 62

Spyware Data breaches Cybercrime Hacking 62

eSecurity Planet

MARCH 28, 2025

A sophisticated cybercrime service known as “Lucid” is exploiting vulnerabilities in Apples iMessage and Androids Rich Communication Services (RCS), allowing cyberthieves to conduct large-scale phishing attacks with alarming success. Examples of scam campaigns delivered via iMessage and RCS.

Phishing 57

Phishing Scams Cybercrime Encryption 57

Zero Day

JUNE 6, 2025

The data in question was posted on a Russian cybercrime forum on May 15 and then uploaded again on June 3, apparently garnering attention from other cybercriminals and potential buyers. The records are being linked to the same ones compromised by cybercriminals in a data breach that AT&T announced in July of 2024.

Password Management 128

Password Management Passwords Identity Theft Artificial Intelligence 128

Security Affairs

FEBRUARY 23, 2025

CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog Juniper Networks fixed a critical flaw in Session Smart Routers China-linked APT group Winnti targets Japanese organizations since March 2024 Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers (..)

Scams 68

Scams Malware Encryption Phishing 68

Security Affairs

JULY 22, 2024

for suspected involvement in the Scattered Spider cybercrime syndicate. arrested a 17-year-old teenager from Walsall who is suspected to be a member of the Scattered Spider cybercrime group (also known as UNC3944 , 0ktapus ). In January 2024, U.S. Law enforcement arrested a 17-year-old boy from Walsall, U.K.,

Cybercrime 135

Cybercrime Social Engineering Hacking Scams 135