Krebs on Security

DECEMBER 29, 2024

In January, KrebsOnSecurity told the story of a Canadian man who was falsely charged with larceny and lost his job after becoming the victim of a complex e-commerce scam known as triangulation fraud. In this scam, you receive what you ordered, and the only party left to dispute the transaction is the owner of the stolen payment card.

Scams 256

Scams Cybercrime Cryptocurrency Social Engineering 256

SecureList

DECEMBER 16, 2024

Review of last year’s predictions The number of services providing AV evasion for malware (cryptors) will increase We continuously monitor underground markets for the emergence of new “cryptors,” which are tools specifically designed to obfuscate the code within malware samples.

Marketing 103

Marketing Data breaches Cryptocurrency Malware 103

SecureWorld News

FEBRUARY 4, 2025

Localization is a combination of measures aimed at adapting your business, product, and messaging to the requirements of the local market and tastes of the local customers. Religious and cultural taboos should be taken into account to prevent alienation of your audiences in the new market. EU, and China.

Marketing 105

Marketing Cybersecurity eCommerce Data breaches 105

Malwarebytes

OCTOBER 15, 2024

Political ads could be hiding online scams, many people feel, and the election, they say, will likely fall victim to some type of “cyber interference.” 52% are “very concerned” or “concerned” about “falling prey to a scam when interacting with political messages.” The reasons could be obvious.

Scams 140

Scams Identity Theft Cybercrime Accountability 140

SecureWorld News

FEBRUARY 14, 2025

And 2025 will be no different, as increasingly sophisticated online hackers seek to take advantage of Valentine's themed email traffic, social media advertisements, or marketing campaigns, and exploit heightened emotions and a desire to connect. Verify charities before donating Scam emails and messages impersonating charities are common.

Scams 84

Scams Cybercrime Phishing Social Engineering 84

The Last Watchdog

DECEMBER 16, 2024

Gen AI threats and quantum computing exposures must be accounted for. Deepfake scams will escalate, with threat actors using AI to create convincing impersonations of executives, risking personal and corporate brands. Attacks targeting identities rose 71% last year, with valid accounts as the top entry point.

Cyber threats 265

Cyber threats CISO IoT Phishing 265

Krebs on Security

NOVEMBER 14, 2024

That investigation detailed how the 38-year-old Shefel adopted the nickname Rescator while working as vice president of payments at ChronoPay , a Russian financial company that paid spammers to advertise fake antivirus scams, male enhancement drugs and knockoff pharmaceuticals. “Hi, how are you?” ” he inquired.

Advertising 297

Advertising Retail Cryptocurrency Cybercrime 297

Krebs on Security

APRIL 10, 2025

Thus, the missives bypass the mobile phone networks entirely and enjoy near 100 percent delivery rate (at least until Apple and Google suspend the spammy accounts). Phishers using multiple virtualized Android devices to orchestrate and distribute RCS-based scam campaigns. Image: Prodaft.

Banking 272

Banking Phishing Mobile Retail 272

SecureWorld News

FEBRUARY 3, 2025

Department of Justice (DOJ) , the seized domains were actively facilitating the sale of phishing kits, scam pages, and other fraud tools, which were then used by transnational organized crime groups to conduct business email compromise (BEC) schemes. According to the U.S.

Phishing 113

Phishing Cybercrime Scams Authentication 113

SecureWorld News

JULY 17, 2025

By the end of the call, she had authorized $25 million in transfers to overseas accounts. Introduction: A high-tech twist on age-old scams Impersonation fraud is not new, but the scale and believability of recent AI-driven schemes pose an unprecedented threat to financial organizations. In 2025, U.S. Figure 1: Projected U.S.

Banking 110

Banking Scams Social Engineering Financial Services 110

Malwarebytes

MAY 1, 2025

Phishing In phishing scams, cybercriminals trick people and businesses into handing over sensitive information like credit card numbers or login details for vital online accounts. Lured in by similar color schemes, company logos, and familiar layouts, victims log in to their account by entering their username and password.

Small Business 91

Small Business Cybersecurity Scams Passwords 91

Malwarebytes

MARCH 20, 2025

This blog post was co-authored with Elie Berreby, Senior SEO Strategist Criminals are highly interested in online marketing and advertising tools that they can leverage as part of their ongoing malware campaigns. We believe this is because the threat actors are primarily interested in harvesting Google accounts.

Scams 66

Scams Accountability Phishing Advertising 66

Krebs on Security

MAY 28, 2025

This wasnt just a scam operation – it was essentially a cybercrime university that empowered fraudsters globally, NCCIA Director Abdul Ghaffar said at a press briefing.

Malware 215

Malware Cybercrime Antivirus Scams 215

eSecurity Planet

NOVEMBER 6, 2024

This data reportedly includes everything from names and addresses to Social Security numbers and bank account details. The stolen data reportedly includes highly personal information — names, dates of birth, Social Security numbers, bank account details, and even records of residents’ interactions with city services. With over 6.5

Ransomware 113

Ransomware Authentication Identity Theft Penetration Testing 113

Thales Cloud Protection & Licensing

JULY 17, 2025

Sea, Sun… and Scams? Yes, summer vibes and scams don’t mix well. Activate MFA Everywhere; It’s Your Digital Sunscreen Multi-Factor Authentication (MFA) is like sunscreen for your online accounts. Make it a habit to enable MFA on all your important accounts: email, social media, banking, and shopping sites.

Scams 48

Scams Backups Passwords Accountability 48

eSecurity Planet

JUNE 17, 2025

Cybersecurity experts are now warning that clicking the familiar “unsubscribe” button at the bottom of unwanted emails could lead to phishing scams or malware attacks. For instance, many email services, such as Gmail, display a built-in “unsubscribe” button near the top of marketing emails.

Phishing 95

Phishing Scams Passwords Malware 95

Malwarebytes

FEBRUARY 4, 2025

And yet, if artificial intelligence achieves what is called an agentic model in 2025, novel and boundless attacks could be within reach, as AI tools take on the roles of agents that independently discover vulnerabilities, steal logins, and pry into accounts. Importantly, the attack methods here are not new.

Artificial Intelligence 144

Artificial Intelligence Small Business Malware Technology 144

The Last Watchdog

DECEMBER 18, 2024

Amini Pedram Amini , Chief Scientist, Opswat The sophistication and abuse of AI are escalating as costs drop, driving a surge in ML-assisted scams and attacks on physical devices. To mitigate risks, organizations must enforce Zero-Trust principles, limit AI access to privileged accounts, and sanitize AI prompts.

Risk 173

Risk Threat Detection Technology Phishing 173

SecureList

JUNE 25, 2025

This accounted for nearly 41% of all unique files detected, a 14-percentage point increase compared to 2024. Microsoft Office applications remained frequent targets for impersonation: Outlook and PowerPoint each accounted for 16%, Excel for nearly 12%, while Word and Teams made up 9% and 5%, respectively.

Adware 84

Adware Phishing Computers and Electronics Banking 84

Digital Shadows

JANUARY 27, 2025

Streamlined RaaS Operations: The ransomware-as-a-service (RaaS) ecosystem has become more efficient, with affiliates adopting new, more specialized strategies like help-desk scams to accelerate and refine their attacks. Zabbix, an open-source IT monitoring tool, oversees networks and servers.

Scams 76

Scams Ransomware Accountability Social Engineering 76

SecureWorld News

MAY 28, 2025

in market value and millions in daily lost e-commerce revenue during its downtime. M&S confirmed that while personal customer data was stolen , payment card details and account passwords were not compromised. retail companies, using similar social-engineering techniques and password-reset scams. billion ($1.5 billion U.S.)

Retail 107

Retail Social Engineering Passwords Ransomware 107

Responsible Cyber

MARCH 2, 2025

According to a 2023 report by Statista, the global subscription e-commerce market is projected to reach $1.5 Without proper oversight, things can spiral out of controlthink unused accounts, forgotten renewals, or unauthorized access. If the account is still active, its a potential entry point for cybercriminals.

Cybersecurity 49

Cybersecurity Accountability Banking Scams 49

BH Consulting

JUNE 30, 2025

Data is their business, and business is good The black market in personal data is the focus of this year’s Internet Organised Crime Threat Assessment (IOCTA). It highlighted how these criminals “go after everything from login credentials to credit card numbers, medical records, and social media accounts”.

Scams 59

Scams DNS Accountability Marketing 59

eSecurity Planet

NOVEMBER 12, 2024

Even McAfee’s most basic plan includes a VPN, identity monitoring, and text scam detection. I recommend McAfee if you’re looking for features like social media privacy, personal data monitoring, and scans of old internet accounts. Norton 360 lacks text scam detection, but again, Norton does offer a free detection tool, Genie.

Antivirus 62

Antivirus Software Identity Theft Spyware 62

Security Affairs

JUNE 15, 2025

CISA adds Wazuh, and WebDAV flaws to its Known Exploited Vulnerabilities catalog Exposed eyes: 40,000 security cameras vulnerable to remote hacking Operation Secure: INTERPOL dismantles 20,000+ malicious IPs in major cybercrime crackdown Over 80,000 servers hit as Roundcube RCE bug gets rapidly exploited A flaw could allow recovery of the phone number (..)

Spyware 65

Spyware Data breaches Cybercrime Scams 65

SecureWorld News

JULY 27, 2025

Wholesalers and so-called fraud shops clean and index those records, advertising credit card dumps or "fullz" (full identity packages) on dozens of multilingual darknet markets. These comforts keep the dark economy humming even as sites vanish in exit scams or police takedowns. The marketplace is growing at an incredible rate.

Phishing 59

Phishing Marketing Cybercrime Encryption 59

BH Consulting

NOVEMBER 14, 2024

Counteracting the clichés One common storyline we see in cybersecurity marketing is how criminals’ use of AI is a major threat. How AI assists financial fraud One area where AI can be effective in helping criminals is in creating scams using impersonation. We overestimate AI,” she said.

Artificial Intelligence 64

Artificial Intelligence Ransomware Social Engineering Technology 64

Security Affairs

MAY 4, 2025

CISA adds Yii Framework and Commvault Command Center flaws to its Known Exploited Vulnerabilities catalog Ireland’s DPC fined TikTok 530M for sending EU user data to China Microsoft sets all new accounts passwordless by default Luxury department store Harrods suffered a cyberattack U.S.

Cybercrime 77

Cybercrime Cyber Attacks Malware Phishing 77

eSecurity Planet

FEBRUARY 17, 2025

Per 6sense, McAfee Cloud Security makes up 12.47% of the worldwide antivirus market share. McAfees most basic plan consists of a VPN and text scam detection features that Microsoft Defender lacks. McAfee benefits organizations wanting features like social media privacy, personal data monitoring, and scans of old internet accounts.

Antivirus 67

Antivirus Identity Theft VPN Spyware 67

Digital Shadows

NOVEMBER 26, 2024

Key Points Phishing incidents rose during the reporting period (August 1 to October 31, 2024), accounting for 46% of all customer incidents. Cloud services alerts increased by 20% due to rising cloud account usage, while malicious file alerts in phishing attacks remain high, exploiting users’ tendencies to open files.

Cyber Attacks 59

Cyber Attacks Phishing Ransomware Cyber Insurance 59

BH Consulting

MAY 28, 2025

When employees know how to protect data and are shown how to spot probable scams, it goes a long way to preventing security incidents and stopping confidential or sensitive information from falling into the wrong hands. However, branding compliance as ethics weakens accountability, she argued. Ethics and AI: just a mirage?

Scams 59

Scams Passwords Insurance Technology 59

Security Affairs

JULY 5, 2025

Sanctions Russia’s Aeza Group for aiding crooks with bulletproof hosting Qantas confirms customer data breach amid Scattered Spider attacks CVE-2025-6554 is the fourth Chrome zero-day patched by Google in 2025 U.S. Agencies warn of ongoing Iranian cyber threats to critical infrastructure U.S.

Data breaches 65

Data breaches Spyware Cybercrime Malware 65

Digital Shadows

MARCH 12, 2025

These fake accounts promote fraudulent offers like free event tickets or gambling top-ups, exploiting user trust and luring victims into phishing scams. A breach leaking unfinished content, such as video game prototypes or film footage, can derail marketing campaigns and cause significant financial losses.

Cyber threats 65

Cyber threats Cryptocurrency IoT Ransomware 65

SecureWorld News

DECEMBER 27, 2024

Expect to see AI-enabled phishing campaigns, deepfake scams, and automated attacks grow in complexity. Identity theft will evolve: Stolen identities will fuel new fraud schemes, like creating crypto accounts in victims names. Payment Card Industry Data Security Standard (PCI DSS) 4.0

Cybersecurity 123

Cybersecurity CISO Risk Government 123

Trend Micro

JUNE 26, 2025

Completion rates can account for employees’ knowledge. Track employee behaviour change based on metrics like the overall risk of account compromise and the number of accounts with weak authentication. To drive engagement, you can offer employees incentives (e.g., gift cards) and add gamification strategies (e.g.,

Security Awareness 72

Security Awareness Cyber Risk Risk Phishing 72

Trend Micro

JUNE 10, 2025

Each team can independently sign off on an image, ensuring accountability and reducing deployment risk. Enable support for multi-key verification Enable multiple signature validations per image to satisfy the needs of development, security, and operations (DevSecOps) teams.

Cyber Risk 52

Cyber Risk Risk Network Security Insurance 52

Krebs on Security

NOVEMBER 26, 2024

At the end of 2023, malicious hackers discovered that many companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with nothing more than a username and password (no multi-factor authentication required). The Telegram ID for this account is 5408575119. “I’ll wait. .

DDOS 339

DDOS Cybercrime Accountability Government 339