article thumbnail

‘The Manipulaters’ Improve Phishing, Still Fail at Opsec

Krebs on Security

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “ The Manipulaters ,” a sprawling web hosting network of phishing and spam delivery platforms. Manipulaters advertisement for “Office 365 Private Page with Antibot” phishing kit sold on the domain heartsender,com.

Phishing 227
article thumbnail

Calendar Meeting Links Used to Spread Mac Malware

Krebs on Security

A search in Google for a string of text from that script turns up a December 2023 blog post from cryptocurrency security firm SlowMist about phishing attacks on Telegram from North Korean state-sponsored hackers. MacOS computers include X-Protect , Apple’s built-in antivirus technology. ” Image: SlowMist.

Malware 277
article thumbnail

Be Very Sparing in Allowing Site Notifications

Krebs on Security

Frank Angiolelli , vice president of security at Indelible, said rogue notifications can be abused for credential phishing, as well as foisting malware and other unwanted applications on users. “This method is currently being used to deliver something akin to adware or click fraud type activity,” Angiolelli said.

Antivirus 343