Security Affairs

NOVEMBER 16, 2020

Researchers discovered an ElasticSearch database exposed online that contained data for over 100000 compromised Facebook accounts. Researchers at vpnMentor discovered an ElasticSearch database exposed online that contained an archive of over 100.000 compromised Facebook accounts. ” reads the analysis published vpnMentor.

Scams 117

Scams Accountability Hacking Passwords 117

Krebs on Security

NOVEMBER 4, 2022

Responding to a recent surge in AI-generated bot accounts, LinkedIn is rolling out new features that it hopes will help users make more informed decisions about with whom they choose to connect. For example, on October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc.

Scams 303

Scams Artificial Intelligence Cryptocurrency Accountability 303

Security Affairs

JULY 5, 2022

Threat actors compromised the Twitter and YouTube accounts of the British Army to promote online crypto scams. The Twitter and YouTube accounts of the British Army were used to promote NFT and other crypto scams. We are aware of a breach of the Army’s Twitter and YouTube accounts and an investigation is underway.

Scams 106

Scams Accountability Authentication Cryptocurrency 106

Webroot

MARCH 3, 2025

During this time, many government agencies and consumer protection organizations come together to help educate consumers on how to keep their personal and financial information secure. Millions of customers were put at risk when their social security numbers, phone numbers, and other sensitive personal information were leaked.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

Security Affairs

MARCH 29, 2025

million in USDT stolen through ‘romance baiting’ scams, where victims are tricked into fake investments promising high returns. in USDT (Tether) linked to a ‘romance baiting’ scam. After convincing them with small returns, the scammer eventually locks accounts and disappears with the funds.

Scams 106

Scams Cryptocurrency Media Hacking 106

Security Affairs

MAY 17, 2025

officials to build trust and access personal accounts. Threat actors send malicious links posing as messaging platform invites to access officials’ accounts, then exploit contacts to impersonate and extract data or funds. ” reads the alert issued by the FBI.

Government 120

Government Social Engineering Authentication Accountability 120

SecureWorld News

MARCH 20, 2025

March Madness is here, and while fans are busy filling out brackets and making last-minute bets, cybercriminals are running their own full-court presstargeting unsuspecting fans with phishing scams, fake betting apps, and credential-harvesting schemes.

Scams 81

Scams Social Engineering Mobile Phishing 81

Security Affairs

APRIL 7, 2025

A campaign named PoisonSeed uses stolen CRM and bulk email credentials to send crypto seed scams, aiming to empty victims’ digital wallets. As part of the attack, PoisonSeed provides security seed phrases to get potential victims to copy and paste them into new cryptocurrency wallets for future compromising.”

Scams 70

Scams Cryptocurrency Phishing Cybercrime 70

Security Affairs

JUNE 17, 2024

Offers that promise easy earnings can also bring with them a host of scams that deceive those who are genuinely seeking income opportunities. t is into this scenario that illicit practices such as moneny mules and reshipping scams can fit. In practice, packages arrived with prepaid shipping labels with stolen credit cards.

Scams 131

Scams Marketing Education Banking 131

Security Affairs

DECEMBER 2, 2024

Operation HAECHI V (July-Nov 2024) targeted cyber frauds like phishing, romance scams, sextortion, investment fraud, online gambling, BEC, and e-commerce fraud. The authorities have warned of “USDT Token Approval Scam” that allows scammers access to the victims’ cryptocurrency wallets and make unauthorized transactions.

Cryptocurrency 124

Cryptocurrency Phishing Scams Cybercrime 124

Security Affairs

MARCH 24, 2024

During the month of Ramadan, Resecurity observed a significant increase in fraudulent activities and scams. During the month of Ramadan, Resecurity observed a significant increase in fraudulent activities and scams, coinciding with a surge in retail and online transactions.

Scams 132

Scams Consumer Protection Retail Government 132

Security Affairs

JUNE 10, 2021

Overall, fraud accounts for 73% of all online attacks: 56% are scams (fraud that results in the victim voluntarily disclosing sensitive data) and 17% are phishing attacks (theft of bank card details). In 2020, a multi-stage scam called Rabbit Hole targeted companies’ brands, primarily retail and online services.

Scams 128

Scams Banking Retail Insurance 128

Security Affairs

NOVEMBER 21, 2024

Scattered Spider members are part of a broader cybercriminal community called “The Com,” where hackers brag about high-profile cyber thefts, typically initiated through social engineering tactics like phone, email, or SMS scams to gain access to corporate networks. ” reads the press release published by DoJ.

Cybercrime 108

Cybercrime Identity Theft Cryptocurrency Phishing 108

Krebs on Security

OCTOBER 5, 2022

The fabricated LinkedIn identities — which pair AI-generated profile photos with text lifted from legitimate accounts — are creating major headaches for corporate HR departments and for those managing invite-only LinkedIn groups. Another “swarm” of LinkedIn bot accounts flagged by Taylor’s group.

Accountability 314

Accountability Scams Artificial Intelligence Cryptocurrency 314

Security Affairs

OCTOBER 20, 2021

Once hijacked the channel, attackers either sell it to the highest bidder or employ it in cryptocurrency scam scheme. The researchers identified around 15,000 actor accounts, most of which were created for this campaign. Hijacked channels ranged from $3 USD to $4,000 USD depending on the number of subscribers. Pierluigi Paganini.

Accountability 144

Accountability Malware Phishing Social Engineering 144

Security Boulevard

JANUARY 16, 2022

Norton 360, a popular antivirus product, has installed a cryptocurrency mining program on its customers’ computers, some cities in Texas have been hit with a phishing scam designed to get users to pay through fraudulent QR code stickers on public parking meters, and how Facebook is still collecting data about you even if you deactivate […].

Accountability 122

Accountability Antivirus Cryptocurrency Scams 122

Security Affairs

NOVEMBER 25, 2024

Thai authorities uncovered call center gangs using fake “02” numbers to deceive citizens into scams and fraudulent investments, generating over 700 million calls. Thai cyber police uncovered three companies using SIP Trunk technology to operate fake “02” numbers, generating 730 million scam calls.

Mobile 121

Mobile Scams Technology Telecommunications 121

Krebs on Security

SEPTEMBER 30, 2022

Someone has recently created a large number of fake LinkedIn profiles for Chief Information Security Officer (CISO) roles at some of the world’s largest corporations. If you were confused at this point, you might ask Google who it thinks is the current Chief Information Security Officer of Chevron. of spam and scam.”

CISO 341

CISO Cybercrime Accountability Information Security 341

Security Affairs

JANUARY 11, 2024

The X account of cybersecurity firm Mandiant was likely hacked through a brute-force password attack, the company revealed. Last week, threat actors hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. Sorry, change password please.”

Accountability 134

Accountability Hacking Cryptocurrency Cybersecurity 134

Krebs on Security

NOVEMBER 21, 2018

Postal Service just fixed a security weakness that allowed anyone who has an account at usps.com to view account details for some 60 million other users, and in some cases to modify account details on their behalf. A USPS brochure advertising the features and benefits of Informed Visibility. Image: USPS.com.

Accountability 279

Accountability Authentication Identity Theft Advertising 279

Security Affairs

MAY 15, 2025

Exposed data included contact details, partial SSNs and bank info, ID images, account history, and limited internal documents. Compromised data includes: Name, address, phone, and email; Masked Social Security (last 4 digits only); Masked bank-account numbers and some bank account identifiers; GovernmentID images (e.g.,

Data breaches 83

Data breaches Banking Accountability Retail 83

Security Affairs

NOVEMBER 18, 2021

Threat actors have launched a phishing campaign targeting more than 125 TikTok ‘Influencer’ accounts in an attempt to hijack them. Researchers from Abnormal Security uncovered a phishing scam aimed at hijacking at least 125 TikTok ‘Influencer’ accounts. ” reads the report published by Abnormal Security.

Accountability 113

Accountability Phishing Media Scams 113

Security Affairs

APRIL 21, 2022

Threat intelligence firm Resecurity details how crooks are delivering IRS tax scams and phishing attacks posing as government vendors. SecurityAffairs – hacking, IRS tax scam). The post Cybercriminals Deliver IRS Tax Scams & Phishing Campaigns By Mimicking Government Vendors appeared first on Security Affairs.

Scams 127

Scams Phishing Government Passwords 127

Security Affairs

FEBRUARY 2, 2020

The Apollon market, one of the largest marketplaces, is likely exit scamming after the administrators have locked vendors’ accounts. The Apollon market , one of the darknet’s largest marketplaces, is likely exit scamming, vendors and customers reported suspicious behavior of its administrators.

Marketing 89

Marketing Scams DDOS Accountability 89

Security Affairs

APRIL 27, 2023

CyberNews analyzed a classic cryptocurrency romance scam, also known as CryptoRom, explaining how scammers hid the money CryptoRom scammers hid the money with several layers of obfuscation, but the Cybernews research team discovered that the stolen funds ended up in Binance accounts. Here’s how we did it.

Scams 98

Scams Cryptocurrency Social Engineering Accountability 98

Security Affairs

SEPTEMBER 10, 2019

The Instagram account of Robert Downey Jr. has been hacked, he is the last celebrity in order of time that had the social media accounts compromised. Instagram account has been hacked, in this case the attacker did not publish offensive messages, but attempted to monetize their efforts by posting fake giveaways for Apple products.

Accountability 108

Accountability Hacking Advertising Scams 108

Security Affairs

JULY 18, 2021

Instagram introduced a new security feature dubbed “Security Checkup” to help users to recover their accounts that have been compromised. “Today, we’re launching Security Checkup, a new feature to help people keep their Instagram accounts secure. . ” states the company.

Accountability 104

Accountability Authentication Scams Hacking 104

Security Affairs

MAY 28, 2025

Apple blocked over $9B in fraud in 5 years, including $2B in 2024, stopping scams from deceptive apps to fake payment schemes on the App Store. In 2024, the company removed over 146,000 developer accounts and blocked 139,000 enrollments for fraudulent activities. million accounts, and flagged 4.7 billion it processed.

Scams 58

Scams Accountability Hacking Mobile 58

Security Affairs

FEBRUARY 27, 2023

Once payments are collected from the victims, they make previously created resources vanish and set up the next new campaign – this is why investigators named the group “Digital Smoke” According to the latest report by FTC released last week called “The Top Scams of 2022” people reported losing $8.8

Scams 98

Scams Mobile Marketing Banking 98

Security Affairs

DECEMBER 31, 2019

Exit scam – Bad news for Grey Market users, one of its administrators revealed that another administrator had emptied the cold storage wallets. you can mark Market as scam exited and ban all our official accounts” reads the message published by the Market admin. Pierluigi Paganini. SecurityAffairs –. Iran, hacking).

Marketing 92

Marketing Scams DDOS Advertising 92

Security Affairs

NOVEMBER 28, 2020

A credible threat actor is offering access to the email accounts of hundreds of C-level executives for $100 to $1500 per account. Access to the email accounts of hundreds of C-level executives is available on the Exploit.in for $100 to $1500 per account. Exploit.in ” reported ZDNet. Pierluigi Paganini.

Accountability 114

Accountability Cybercrime Hacking Data collection 114

Security Affairs

MARCH 15, 2020

A cybercrime gang focused on Business Email Compromise (BEC) has started using coronavirus-themed scam emails in its attacks. The researchers received a coronavirus-themed scam email that attempted to trick victims into using a different bank account for the payment due to the COVID-19 outbreak. A change of the bank account).

Scams 139

Scams Banking Cybercrime Advertising 139

Security Affairs

FEBRUARY 2, 2025

Cybercriminals used the seized domains to run BEC scams, stealing credentials and redirecting payments. Those payments would instead be redirected to a financial account the perpetrators controlled, resulting in significant losses to victims.” The cybercrime group also offered training to its customers on how to use the tools.

Cybercrime 108

Cybercrime Advertising Phishing Hacking 108

Security Affairs

SEPTEMBER 5, 2022

The subject of the emails reads “Important Notification About Your Account” in an attempt to urge recipients to open it. Once opened, the email appears as a legitimate email communication from American Express, while the content instructs the cardholder on how to view the secure, encrypted message attached. Pierluigi Paganini.

Phishing 100

Phishing Scams Social Engineering Password Management 100

Security Boulevard

JANUARY 21, 2024

They talk about popular channels like Scammer Payback and Kitboga that show these scams in progress. Then they switch to the best practices to prevent social media account takeovers, highlighting […] The post The World of Scambaiting, Preventing Social Media Account Takeovers, Network Wrenches Hacked appeared first on Shared Security Podcast.

Media 78

Media Accountability Hacking Scams 78

Security Affairs

AUGUST 6, 2019

The FBI published a security advisory to warn of cyber actors using online dating sites to conduct confidence/romance scam and recruit money mules. The FBI published a security advisory to warn of confidence/romance scams turning victims into money mules. ” reads the advisory. located in a foreign country, U.S.

Scams 82

Scams Banking Accountability Advertising 82

Security Affairs

JULY 5, 2019

” The FBI provided the following answers to those interested in have more info on the sextortion scams: What is sextortion? Caregivers may also want to review the settings on a young person’s social media accounts with them. Keeping accounts private can prevent predators from gathering their personal information.

Scams 111

Scams Internet Internet Advertising 111