Security Affairs

AUGUST 18, 2024

Mad Liberator employs social engineering techniques to gain access to the victim’s environment, specifically targeting organizations using remote access tools like Anydesk. The attacker used Anydesk to access the victim’s OneDrive account and files on a central server via a mapped network share.

Social Engineering 144

Social Engineering Engineering Ransomware Cybercrime 144

Digital Shadows

OCTOBER 25, 2024

During the investigation, we discovered a wider trend: a campaign of escalated social engineering tactics originally associated with the ransomware group “Black Basta.” These external users set their profiles to a “DisplayName” designed to make the targeted user think they were communicating with a help-desk account.

Social Engineering 128

Social Engineering Engineering Phishing Accountability 128

NetSpi Technical

JANUARY 8, 2025

More from TrendMicro While we wont be going into model poisoning or AI jailbreaks in this post, we will cover a method to abuse excessive Storage Account permissions to get code execution in notebooks that run in the AML service. The supporting Storage Account is named after the AML workspace name (netspitest) and a 9-digit number.

Accountability 96

Accountability Authentication Identity Theft Social Engineering 96

Krebs on Security

OCTOBER 7, 2022

consumers have their online bank accounts hijacked and plundered by hackers, U.S. But new data released this week suggests that for some of the nation’s largest banks, reimbursing account takeover victims has become more the exception than the rule. In the case of Zelle scams, the answer is yes. ” Sen.

Banking 293

Banking Accountability Scams Passwords 293

Security Affairs

MAY 2, 2025

Microsoft announced that all new accounts will be “passwordless by default” to increase their level of security. Microsoft now makes all new accounts “passwordless by default,” enhancing protection against social engineering attacks, phishing, brute-force, and credential stuffing attacks.

Accountability 66

Accountability Passwords Social Engineering Authentication 66

Krebs on Security

OCTOBER 20, 2023

BeyondTrust’s security team detected that someone was trying to use an Okta account assigned to one of their engineers to create an all-powerful administrator account within their Okta environment. He said that on Oct 2., But she said that by Oct.

Social Engineering 362

Social Engineering Engineering Accountability Hacking 362

Hacker's King

DECEMBER 26, 2024

If your account falls into the wrong hands, it can lead to the loss of personal memories, private messages, or even a damaged online reputation. While hacking attempts continue to evolve, so do the strategies to secure your account. What to Watch For: Sudden changes in account settings, such as linked emails or phone numbers.

Accountability 52

Accountability Hacking Social Engineering Passwords 52

Security Affairs

JUNE 9, 2025

OpenAI banned ChatGPT accounts tied to Russian and Chinese hackers using the tool for malware, social media abuse, and U.S. OpenAI banned ChatGPT accounts that were used by Russian-speaking threat actors and two Chinese nation-state actors. We banned the OpenAI accounts used by this adversary.”

Accountability 73

Accountability Social Engineering Media Penetration Testing 73

Security Affairs

JUNE 28, 2025

The cybercriminals are using social engineering techniques to gain access to target organizations by impersonating employees or contractors. In many cases, threat actors employed methods to bypass multi-factor authentication (MFA), by tricking victims’ help desk services to add unauthorized MFA devices to compromised accounts.

Social Engineering 80

Social Engineering Cybercrime Engineering Authentication 80

Security Affairs

MAY 17, 2025

officials to build trust and access personal accounts. Threat actors send malicious links posing as messaging platform invites to access officials’ accounts, then exploit contacts to impersonate and extract data or funds. ” reads the alert issued by the FBI.

Government 122

Government Social Engineering Authentication Accountability 122

Krebs on Security

NOVEMBER 21, 2020

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. “This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. . 2019 that wasn’t discovered until April 2020.

Cryptocurrency 364

Cryptocurrency Scams Social Engineering VPN 364

Krebs on Security

FEBRUARY 26, 2023

GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee.

Hacking 339

Hacking Social Engineering Phishing Scams 339

Penetration Testing

JUNE 9, 2025

Beware 'imad213,' a fake Instagram booster stealing credentials via social engineering and bot services. Learn how to protect your account.

Social Engineering 70

Social Engineering Engineering Accountability Scams 70

Krebs on Security

DECEMBER 29, 2024

How to Lose a Fortune with Just One Bad Click told the sad tales of two cryptocurrency heist victims who were scammed out of six and seven figures after falling for complex social engineering schemes over the phone.

Scams 247

Scams Cybercrime Cryptocurrency Social Engineering 247

Krebs on Security

JANUARY 24, 2020

In the case of e-hawk.net, however, the scammers managed to trick an OpenProvider customer service rep into transferring the domain to another registrar with a fairly lame social engineering ruse — and without triggering any verification to the real owners of the domain. ” REGISTRY LOCK.

DNS 340

DNS Social Engineering Engineering Accountability 340

The Last Watchdog

MARCH 28, 2025

In the case studies demonstrated by SquareX , these attacks leverage AI agents to automate the majority of the attack sequence, requiring minimal social engineering and interference from the attacker.

Antivirus 147

Antivirus Ransomware Social Engineering Engineering 147

Krebs on Security

MARCH 31, 2020

Barrie said the hacker was able to read messages and notes left on escrow.com’s account at GoDaddy that only GoDaddy employees should have been able to see. “This guy had access to the notes, and knew the number to call,” to make changes to the account, Barrie said.

Phishing 349

Phishing DNS Social Engineering Accountability 349

Security Affairs

APRIL 7, 2025

Cybercriminals exploit compromised accounts for EDR-as-a-Service (Emergency Data Requests – EDR), targeting major platforms According to a detailed analysis conducted by Meridian Group, an increasingly complex and structured phenomenon, commonly referred to as EDR-as-a-Service, is taking hold in the cybersecurity landscape.

Cybercrime 139

Cybercrime Social Engineering Accountability Government 139

Krebs on Security

AUGUST 19, 2020

According to interviews with several sources, this hybrid phishing gang has a remarkably high success rate, and operates primarily through paid requests or “bounties,” where customers seeking access to specific companies or accounts can hire them to target employees working remotely at home. A phishing page (helpdesk-att[.]com)

Phishing 363

Phishing VPN Social Engineering Accountability 363

Krebs on Security

AUGUST 21, 2020

” The perpetrators focus on social engineering new hires at the targeted company, and impersonate staff at the target company’s IT helpdesk. The actor logged the information provided by the employee and used it in real-time to gain access to corporate tools using the employee’s account.”

Social Engineering 363

Social Engineering VPN Authentication Engineering 363

Krebs on Security

APRIL 6, 2022

The smash-and-grab attacks by LAPSUS$ obscure some of the group’s less public activities, which according to Microsoft include targeting individual user accounts at cryptocurrency exchanges to drain crypto holdings. The group of teenagers who hacked Twitter hailed from a community that traded in hacked social media accounts.

Social Engineering 299

Social Engineering Phishing Accountability Engineering 299

Security Affairs

APRIL 21, 2025

The malware is delivered via social engineering, attackers attempt to trick victims into tapping cards on infected phones. Calls enable social engineering in a Telephone-Oriented Attack Delivery (TOAD) scenario. Analysis of the SuperCard X campaign in Italy revealed custom malware builds tailored for regional use.

Malware 106

Malware Social Engineering Banking Engineering 106

Security Affairs

JULY 2, 2025

The cybercriminals are using social engineering techniques to gain access to target organizations by impersonating employees or contractors. In many cases, threat actors employed methods to bypass multi-factor authentication (MFA), by tricking victims’ help desk services to add unauthorized MFA devices to compromised accounts.

Data breaches 64

Data breaches Social Engineering Engineering Cybercrime 64

The Last Watchdog

JANUARY 30, 2025

Using a very clever social engineering attack that exploits trusted domains, the adversary can then further escalate the profile hijacking attack to steal passwords from the victims browser. This allows the extension to directly interact with local apps without further authentication.

Social Engineering 130

Social Engineering Authentication Engineering Accountability 130

Malwarebytes

APRIL 1, 2025

This update must be completed by 2025-03-16 to avoid any potential penalties or disruptions to your account. Perhaps they’ll sell the details on the dark web, or use them for themselves to get access to your Microsoft accounts. Instead use a secure method such as your online account or another application on IRS.gov.

Scams 136

Scams Phishing Artificial Intelligence Social Engineering 136

SecureWorld News

FEBRUARY 6, 2025

While the company assures that sensitive information like full payment details and Social Security numbers were not compromised, the incident serves as another reminder of the vulnerabilities that can arise from external partnerships. Mandate multi-factor authentication (MFA) Require MFA for all vendor accounts accessing critical systems.

Data breaches 95

Data breaches Accountability Social Engineering Risk 95

SecureWorld News

FEBRUARY 25, 2025

One of the report's most pressing concerns is the role of Generative AI in social engineering attacks. From the report: "Generative AI is being used to create highly convincing phishing emails, fake voices, and even deepfake videosmaking social engineering attacks more difficult to detect.

Cybersecurity 97

Cybersecurity Social Engineering Artificial Intelligence Cyber threats 97

IT Security Guru

FEBRUARY 25, 2025

Other Ways Threat Actors Exploit Human Behaviour In addition to fatigue attacks, malefactors weaponise social engineering. MFA fatigue is often coupled with social engineeringan attacker might contact the victim, masquerading as IT support, and advise them to approve the prompt to “resolve an issue.”

Social Engineering 118

Social Engineering Authentication Risk Accountability 118

Krebs on Security

JANUARY 19, 2021

The government says Ferizi and his associates made money by hacking PayPal and other financial accounts, and through pornography sites he allegedly set up mainly to steal personal and financial data from visitors. ” [Side note: It may be little more than a coincidence, but my PayPal account was hacked in Dec.

Identity Theft 353

Identity Theft Government Accountability Social Engineering 353

Krebs on Security

AUGUST 19, 2021

“According to this actor, he had originally intended to send his targets—all senior-level executives—phishing emails to compromise their accounts, but after that was unsuccessful, he pivoted to this ransomware pretext,” Hassold wrote. Open our letter at your email. Launch the provided virus on any computer in your company.

Ransomware 363

Ransomware Social Engineering Cybercrime Scams 363

eSecurity Planet

OCTOBER 22, 2024

Cybercriminals employ social engineering techniques to trick you into believing you must resolve fictitious technical issues. The hallmark of ClickFix campaigns is their clever use of social engineering. Enable multi-factor authentication (MFA): Implementing MFA adds layer of security to your accounts.

Scams 124

Scams Malware Phishing Social Engineering 124

Troy Hunt

JULY 17, 2020

The Twitter "breach" is really interesting stuff (I don't think breach is the right word here, "account takeover via social engineering" seems more apt) Sponsored by: SecurityFWD. and isn't in Melbourne!) A brand new YouTube show from Varonis. Watch Episode 1: How Far can Wi-Fi Travel?

Social Engineering 256

Social Engineering Engineering Accountability 256

Webroot

MARCH 3, 2025

Common attacks to consumer protection Identity theft and fraud Some common types of identity theft and fraud include account takeover fraud , when criminals use stolen personal information such as account numbers, usernames, or passwords to hijack bank accounts, credit cards, and even email and social media accounts.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

SecureWorld News

MARCH 20, 2025

Attackers are mimicking tournament brackets, betting promotions, and registration formstricking users into handing over credentials or linking bank accounts to fraudulent sites. This intersection of sports, money, and digital activity makes for a perfect storm of social engineering attacks. Awareness and vigilance.

Scams 84

Scams Social Engineering Phishing Mobile 84

Krebs on Security

JANUARY 29, 2020

A review of the exposed support forum by this author suggests that while none of the posts exposed customer information such as payment card data, a number of them did include customer account information, such customer names, device identifiers and in some cases location information.

Social Engineering 333

Social Engineering Telecommunications Data privacy Engineering 333

SecureWorld News

APRIL 22, 2025

This incident highlights the critical vulnerability in cryptocurrency communities, where high-net-worth individuals or executives may be more prone to social engineering attacks due to the high volume of media and investor engagement they handle. This adds an additional layer of protection in the event of credential theft.

Cryptocurrency 91

Cryptocurrency Social Engineering Cybercrime Engineering 91

Security Affairs

OCTOBER 11, 2024

“CyberAv3nger accounts also asked our models high-level questions about how to obfuscate malicious code, how to use various security tools often associated with post-compromise activity, and for information on both recently disclosed and older vulnerabilities from a range of products.” ” reads the OpenAI’s report.

Malware 136

Malware Social Engineering Engineering Hacking 136