article thumbnail

Pakistani Firm Shipped Fentanyl Analogs, Scams to US

Krebs on Security

and Pakistan whose employees are accused of using online ads to scam westerners seeking help with trademarks, book writing, mobile app development and logo designs, a new investigation reveals. asserted last year that certain scam firms in Karachi were impersonating the company. In an indictment (PDF) unsealed last month, the U.S.

article thumbnail

Phishers Target Aviation Execs to Scam Customers

Krebs on Security

KrebsOnSecurity recently heard from a reader whose boss’s email account got phished and was used to trick one of the company’s customers into sending a large payment to scammers. However, BEC scams were the second most costly form of cybercrime reported to the feds last year, with nearly $2.8 billion in claimed losses.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

“I sent you an email from your email account,” sextortion scam claims

Malwarebytes

In a new version of the old Hello pervert emails, scammers are relying on classic email spoofing techniques to try and convince victims that they have lost control of their email account and computer systems. But, as with all sextortion scams, this threat is an entirely empty one. Often youre only allowed one day to pay.

article thumbnail

How to Lose a Fortune with Just One Bad Click

Krebs on Security

A scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him to click “yes” to a Google prompt on his mobile device.

article thumbnail

Fake Etsy invoice scam tricks sellers into sharing credit card information 

Malwarebytes

Unfortunately, a new scam is making the rounds, and its crucial to recognize the warning signs before you fall victim. In this post, well walk you through exactly how this scam works, show you what to watch out for, and give you tips on keeping your Etsy account secure. Scam sites often have broken or non-functioning links.

article thumbnail

“Urgent reminder” tax scam wants to phish your Microsoft credentials

Malwarebytes

This update must be completed by 2025-03-16 to avoid any potential penalties or disruptions to your account. Perhaps they’ll sell the details on the dark web, or use them for themselves to get access to your Microsoft accounts. But that’s just one example of a tax scam.

article thumbnail

Chinese Innovations Spawn Wave of Toll Phishing Via SMS

Krebs on Security

Last week, the Massachusetts Department of Transportation (MassDOT) warned residents to be on the lookout for a new SMS phishing or “smishing” scam targeting users of EZDriveMA , MassDOT’s all electronic tolling program. In October 2023, KrebsOnSecurity wrote about a massive uptick in SMS phishing scams targeting U.S.