eSecurity Planet

JULY 14, 2025

According to TechRepublic, the FBI said these hackers have been “convincing help desk staff to bypass multi-factor authentication (MFA) protections by registering rogue MFA devices on compromised accounts.” Insurance and payroll firms also breached Beyond airlines and retailers, insurance and benefits providers are also under siege.

Insurance

SecureWorld News

MAY 28, 2025

In early May 2025, two of the United Kingdom's best-known grocers, Marks & Spencer (M&S) and the Co-op, as well as luxury retailer Harrods, were struck by sophisticated social-engineering attacks that tricked IT teams into resetting critical passwords and deploying ransomware across their networks. retail industry.

Retail

Security Affairs

MAY 15, 2025

Exposed data included contact details, partial SSNs and bank info, ID images, account history, and limited internal documents. Compromised data includes: Name, address, phone, and email; Masked Social Security (last 4 digits only); Masked bank-account numbers and some bank account identifiers; GovernmentID images (e.g.,

Data breaches

SecureWorld News

JULY 17, 2025

By the end of the call, she had authorized $25 million in transfers to overseas accounts. Introduction: A high-tech twist on age-old scams Impersonation fraud is not new, but the scale and believability of recent AI-driven schemes pose an unprecedented threat to financial organizations. In 2025, U.S. Figure 1: Projected U.S.

Banking

eSecurity Planet

MAY 16, 2025

The stolen information was then used in social engineering scams that tricked users into giving away their crypto. These insiders abused their access to customer support systems to steal the account data for a small subset of customers, Coinbase said in a blog post. Masked bank account details and identifiers. What was stolen?

Social Engineering

Malwarebytes

FEBRUARY 4, 2025

And yet, if artificial intelligence achieves what is called an agentic model in 2025, novel and boundless attacks could be within reach, as AI tools take on the roles of agents that independently discover vulnerabilities, steal logins, and pry into accounts. Importantly, the attack methods here are not new.

Artificial Intelligence

SecureList

MARCH 25, 2025

Key findings Phishing Banks were the most popular lure in 2024, accounting for 42.58% of financial phishing attempts. Amazon Online Shopping was mimicked by 33.19% of all phishing and scam pages targeting online store users in 2024. Consumers remained the primary target of financial cyberthreats, accounting for 73.69% of attacks.

Phishing

Zero Day

JUNE 22, 2025

We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. Here's how to check if your accounts are at risk and what to do next.

Passwords

Webroot

MAY 5, 2025

By understanding the target’s interests, behaviors, and communication patterns, AI can craft messages that appear more legitimate and relevant, increasing the likelihood of the target falling for the scam. Be cautious of emails that threaten account suspension or demand immediate payment. Also, ensure the sender is legitimate.

Phishing

Thales Cloud Protection & Licensing

OCTOBER 16, 2024

According to Imperva’s State of API Security in 2024 report, APIs—the rules allowing software applications to communicate with each other—now account for a staggering 71% of internet traffic. Businesses, particularly those in financial services, healthcare, and retail sectors, suffer from operational disruptions and financial penalties.

DDOS

Security Affairs

MAY 4, 2025

CISA adds Yii Framework and Commvault Command Center flaws to its Known Exploited Vulnerabilities catalog Ireland’s DPC fined TikTok 530M for sending EU user data to China Microsoft sets all new accounts passwordless by default Luxury department store Harrods suffered a cyberattack U.S.

Cybercrime

Zero Day

JUNE 20, 2025

We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. Here's how to check if your accounts are at risk and what to do next.

Passwords

Digital Shadows

NOVEMBER 26, 2024

Key Points Phishing incidents rose during the reporting period (August 1 to October 31, 2024), accounting for 46% of all customer incidents. Cloud services alerts increased by 20% due to rising cloud account usage, while malicious file alerts in phishing attacks remain high, exploiting users’ tendencies to open files.

Cyber Attacks

Malwarebytes

NOVEMBER 13, 2024

million complaints for a wide range of internet scams, resulting in $37.4 Brand impersonation scams This Black Friday and beyond, you’re likely to see scammers ripping off big name brands. Except in this scam we caught online, the website isn’t really Amazon—check out the URL. These scams are very common.

Scams

Krebs on Security

JANUARY 30, 2025

In October 2024, the security firm Silent Push published a lengthy analysis of how Amazon AWS and Microsoft Azure were providing services to Funnull, a two-year-old Chinese content delivery network that hosts a wide variety of fake trading apps, pig butchering scams , gambling websites, and retail phishing pages.

Accountability

Krebs on Security

FEBRUARY 18, 2025

Merrill has been studying the evolution of several China-based smishing gangs, and found that most of them feature helpful and informative video tutorials in their sales accounts on Telegram. Another important innovation is the use of mass-created Apple and Google user accounts through which these phishers send their spam messages.

Phishing

Security Affairs

MAY 11, 2025

CVSS) in IOS XE That Enables Root Exploits via JWT Internet tracking: How and why were followed online Google to pay Texas $1.4 CVSS) in IOS XE That Enables Root Exploits via JWT Internet tracking: How and why were followed online Google to pay Texas $1.4

Spyware

Security Affairs

MAY 21, 2025

Exposed data included contact details, partial SSNs and bank info, ID images, account history, and limited internal documents. Name, address, phone, and email; Masked Social Security (last 4 digits only); Masked bank-account numbers and some bank account identifiers; GovernmentID images (e.g., We said no.

Data breaches

Zero Day

JUNE 13, 2025

We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. How do I set up a proxy?

VPN

Adam Levin

NOVEMBER 17, 2020

Here are 50 ways to avoid getting scammed on Black Friday — and beyond. Credit cards offer markedly better fraud protections than debit cards , which connect directly to your bank account. Virtual credit cards similarly allow online shoppers to mask their financial accounts. Shop at reputable and recognizable retailers.

Scams

Adam Levin

NOVEMBER 23, 2020

of all reports to the BBB Scam Tracker “were online purchase scams, up from 24.3% of those consumers lost money due to those scams, up from 71.2% A BBB survey conducted in August found that the majority of these scammed consumers made purchases for which they never received products. Keep a close eye on your accounts.

Scams

Joseph Steinberg

JANUARY 18, 2024

Over the past year I have experimented to see how various retailers handle personal information that they collect from customers, especially when such information is collected as part of a purchase made by the customer in what appears, at first glance, to be some “amazing deal.”

Data collection

Krebs on Security

AUGUST 7, 2024

A partial selfie posted by Puchmade Dev to his Twitter account. That story showed how Punchmade’s social media profiles promoted Punchmade-themed online stores selling bank account and payment card data. Incredibly, Turner acknowledges that PNC told him his account was flagged for attention from law enforcement officials.

Banking

Security Affairs

MARCH 24, 2024

During the month of Ramadan, Resecurity observed a significant increase in fraudulent activities and scams. During the month of Ramadan, Resecurity observed a significant increase in fraudulent activities and scams, coinciding with a surge in retail and online transactions.

Scams

Security Affairs

JUNE 10, 2021

Overall, fraud accounts for 73% of all online attacks: 56% are scams (fraud that results in the victim voluntarily disclosing sensitive data) and 17% are phishing attacks (theft of bank card details). In 2020, a multi-stage scam called Rabbit Hole targeted companies’ brands, primarily retail and online services.

Scams

Krebs on Security

OCTOBER 1, 2021

Federal Communications Commission (FCC) is asking for feedback on new proposed rules to crack down on SIM swapping and number port-out fraud, increasingly prevalent scams in which identity thieves hijack a target’s mobile phone number and use that to wrest control over the victim’s online identity.

Wireless

Krebs on Security

JULY 29, 2021

Earlier this month, customers of the soccer jersey retailer classicfootballshirts.co.uk The messages addressed customers by name and referenced past order numbers and payment amounts tied to each account. From there, the attackers can reset the password for any online account that allows password resets via SMS.

Passwords

The Last Watchdog

APRIL 7, 2020

Here are key takeaways: Romance scams Like many modern companies, Zoosk, the popular San Francisco-based dating site, rests on infrastructure that’s predominantly cloud-based. they then began to use the stolen credentials to launch automated account takeovers. “So And the next step we saw was romance scams. We spoke at RSA 2020.

Mobile

Krebs on Security

OCTOBER 18, 2022

Yet, one class of Americans — those receiving food assistance benefits via state-issued prepaid debit cards — are particularly exposed to losses from skimming scams, and usually have little recourse to do anything about it. California’s EBT card does not currently include a chip. That silver square is a hologram.

Retail

Krebs on Security

AUGUST 7, 2018

Investigators allege Handschumacher was part of a group of at least nine individuals scattered across multiple states who for the past two years have drained bank accounts via an increasingly common scheme involving mobile phone “SIM swaps.”

Mobile

Identity IQ

JUNE 8, 2022

4 Ways to Avoid Payment App Scams. There are several scams that criminals can run to cheat payment app users out of their money or trick them into providing personal information. If you use payment apps, use these tips to help avoid scams. Avoid Phishing Scams. IdentityIQ. Don’t Pay for Goods or Services.

Scams

Malwarebytes

DECEMBER 28, 2023

In 2023, the public primarily confronted two varieties of online scams: the technical and the topical. Technical scams abuse legitimate aspects of modern internet infrastructure to lead users to illegitimate or compromised sites. Topical scams, on the other hand, are simpler. OBN Brandon’s trick is almost always the same.

Scams

Heimadal Security

DECEMBER 13, 2022

The holidays are coming up, and it’s a busy time for cybercriminals who are looking to empty your bank account. Amazon has warned UK shoppers that text messages are being used to scam them. The post Amazon Shoppers Warned to Watch Out for Holiday Scams appeared first on Heimdal Security Blog.

Scams

Security Affairs

NOVEMBER 12, 2018

Crooks are exploiting the popularity of Elon Musk and a series of hacked verified Twitter accounts to implement a new fraud scheme. Crooks are exploiting the popularity of Elon Musk and a series of hacked verified Twitter accounts (i.e. in a simple as effective scam scheme. in a simple as effective scam scheme.

Scams

Krebs on Security

JUNE 22, 2023

.” As early as April 2022, KrebsOnSecurity began receiving tips from Canadian readers who were puzzling over why they’d just received one of these SMS phishing messages that referenced information from a recent order they’d legitimately placed at an online retailer. info and pay a $1.55 info , legodelivery[.]info

Phishing

Identity IQ

NOVEMBER 5, 2021

Along with legitimate “Now Hiring” signs dotting retail stores and restaurants across the United States, job ads are popping up in social media feeds, the internet and inboxes promising some extraordinarily well-paying jobs — if applicants provide their Social Security numbers and other details upfront.

Scams

Identity IQ

NOVEMBER 28, 2023

What Is a Fake Package Delivery Scam? With the increase in online shopping comes the increased risk of falling victim to scams. One growing threat during this time is the fake package delivery notification scam. What Is a Phishing Scam? Fake shipping delivery scams fall under the broader category of phishing scams.

Scams