Identity IQ

JANUARY 11, 2024

New AI Scams to Look Out For in 2024 IdentityIQ Artificial intelligence (AI) has quickly reshaped many aspects of everyday life. Here are three new AI scams to look out for in 2024 as well as some tips to help protect yourself and stay prepared for the explosive development of AI.

Scams 96

Scams Artificial Intelligence Identity Theft Phishing 96

Webroot

FEBRUARY 13, 2024

In the digital age, the quest for love has moved online, but so have the fraudsters, with romance scams reaching record highs. These scams don’t just harm individuals financially and emotionally; they can also pose significant risks to businesses.

Scams 81

Scams Cryptocurrency Media Education 81

Spinone

NOVEMBER 12, 2020

What is social engineering? Social engineering is a manipulative technique used by criminals to elicit specific actions in their victims. Social engineering is seldom a stand-alone operation. money from a bank account) or use it for other social engineering types. Check recipient.

Social Engineering 52

Social Engineering Engineering Phishing Banking 52

Identity IQ

MAY 16, 2023

The Growing Threat of Google Voice Scams IdentityIQ Imagine this: You’re eagerly selling an antique dresser on Facebook Marketplace and a prospective buyer communicates interest in it. However, they express concern that you may be trying to scam them. What is a Google Voice Scam? What is Google Voice? phone number.

Scams 96

Scams Identity Theft Accountability Authentication 96

Krebs on Security

FEBRUARY 26, 2023

GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee.

Hacking 253

Hacking Social Engineering Phishing Scams 253

Malwarebytes

DECEMBER 28, 2023

In 2023, the public primarily confronted two varieties of online scams: the technical and the topical. Technical scams abuse legitimate aspects of modern internet infrastructure to lead users to illegitimate or compromised sites. Topical scams, on the other hand, are simpler. We know these scams all too well.

Scams 87

Scams Accountability Social Engineering Small Business 87

Security Through Education

NOVEMBER 21, 2023

At Social-Engineer, we define impersonation as “the practice of pretexting as another person with the goal of obtaining information or access to a person, company, or computer system.” Impersonation scams are deceptive tactics used by cybercriminals to pose as trusted entities or individuals to exploit victims.

Scams 52

Scams Social Engineering Education Identity Theft 52

Malwarebytes

JUNE 19, 2023

A particularly nasty slice of phishing, scamming, and social engineering is responsible for DoorDash drivers losing a group total of around $950k. A 21 year old man named David Smith, from Connecticut, allegedly figured out a way to extract large quantities of cash from drivers with a scam stretching back to 2020.

Scams 87

Scams Phishing Password Management Passwords 87

Malwarebytes

MAY 15, 2022

Kidnap scams involve making a phone call to a victim and telling them a loved one has been taken. Things become even worse when social engineering combines with publicly available data to make it even more convincing. 2 factor authentication and password managers are good places to start. The virtual kidnap: Step by step.

Scams 126

Scams Social Engineering Password Management Engineering 126

Security Affairs

SEPTEMBER 5, 2022

The phishing campaign bypassed native Google Workspace email security controls because it passed both DKIM and SPF email authentication. The post A new phishing scam targets American Express cardholders appeared first on Security Affairs. The page was crafted to request the victims to enter their user ID and password.

Phishing 99

Phishing Scams Social Engineering Password Management 99

SecureList

JULY 5, 2023

A typical phishing scam aimed at a hot wallet user works as follows: hackers send email messages addressed as coming from a well-known crypto exchange and requesting the user to confirm a transaction or verify their wallet again. As is the case with hot wallets, scammers use social engineering techniques to get to users’ funds.

Scams 95

Scams Phishing Cryptocurrency Social Engineering 95

Security Boulevard

JANUARY 26, 2023

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Fig 8 - Source code showing commented-out credit card validation element The malicious domain used in this scam - zscaler-finance-analyst-strategy[.]live,

Scams 130

Scams Identity Theft Social Engineering Advertising 130

Krebs on Security

NOVEMBER 21, 2020

The attacks were facilitated by scams targeting employees at GoDaddy , the world’s largest domain name registrar, KrebsOnSecurity has learned. In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com.

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

Malwarebytes

MARCH 29, 2021

There are some scams on Steam which have stood the test of time. Like Steam phishing campaigns, this particular Steam scam—referred to loosely as the “I accidentally reported you” or “I accidentally reported your account” scam—has been coming and going since initial reports of it emerged in late 2018.

Scams 145

Scams Accountability Social Engineering Passwords 145

SecureWorld News

MAY 22, 2023

More than 450 workers at the United States Postal Service (USPS) lost more than $1 million in a direct deposit scam that left postal workers without pay, angry at the USPS for not heeding warnings of the scheme, and the agency scrambling to figure out exactly what happened. This was a not an incredibly technical attack.

Scams 80

Scams Password Management Passwords Authentication 80

Security Affairs

OCTOBER 17, 2023

With 85% of campaigns targeting victims with phishing emails containing malicious links, another form of a social engineering attack, education and cyber vigiliance remain a high priority. The MGM attacks were almost identical to the social engineering attacks on Caesars, which targeted a third-party IT help desk.

Social Engineering 120

Social Engineering Ransomware Engineering Phishing 120

Security Through Education

JANUARY 18, 2023

Impersonation Scams. These range from simple to sophisticated scams to convince you they are genuine, in hopes that you feel comfortable sharing personal or financial information whether on the phone, via email, or text. Although BEC attacks may be targeted at business, they can also be used to scam individual people.

Cybersecurity 98

Cybersecurity Social Engineering Scams IoT 98

The Last Watchdog

APRIL 14, 2022

For starters, attackers leverage social engineering tactics and information gleaned from websites and social media profiles to determine employees’ working relationships and connections. We would never expect someone we know and work with to scam us, much less defraud our organization.

Phishing 243

Phishing Accountability Scams Social Engineering 243

Security Boulevard

APRIL 16, 2024

Not OK: SMS 2FA — Widespread spam targets carrier employees, as scrotes try harder to evade two-factor authentication. The post SIM Swappers Try Bribing T-Mobile and Verizon Staff $300 appeared first on Security Boulevard.

Mobile 132

Mobile Authentication Social Engineering Wireless 132

Krebs on Security

JANUARY 30, 2024

2022 that an intrusion had exposed a “limited number” of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page.

Social Engineering 305

Social Engineering Mobile Cybercrime Passwords 305

SC Magazine

MAY 12, 2021

In a blog, Sophos researchers explain how the attackers – which the researchers believe could all be operated by the same group – used social engineering, counterfeit websites, including a fake iOS App Store download page, and an iOS app-testing website to distribute the fake apps to their victims.

Scams 62

Scams Cryptocurrency Social Engineering Banking 62

SecureWorld News

MARCH 21, 2024

March Madness is a prime opportunity for cybercriminals to deploy phishing lures, malicious apps, and social engineering tactics," warns Krishna Vishnubhotla, VP of Product Strategy at mobile security firm Zimperium. The emotional investment and spike in online activity create a perfect storm that organizations need to protect against."

Cybersecurity 85

Cybersecurity Social Engineering Phishing Mobile 85

Malwarebytes

OCTOBER 9, 2023

The stolen data is only worth something in so far as it can be used to extract money from somebody, so we expect it will be used in social engineering attacks, like scams and phishing. As 23andMe says in its own blog post, "Since 2019 we’ve offered and encouraged users to use multi-factor authentication."

Passwords 135

Passwords Accountability Scams Social Engineering 135

Appknox

JUNE 23, 2022

Apple iOS users often fall prey to mobile scams; around 30.1% Thus, these Australian attacks significantly contribute to the rising trend in socially engineered attacks. Social media-based scams are increasing as the average Australian uses their smartphone to connect unilaterally with multiple social networking services.

Social Engineering 92

Social Engineering Mobile Scams Engineering 92

Krebs on Security

AUGUST 19, 2020

Allen said a typical voice phishing or “vishing” attack by this group involves at least two perpetrators: One who is social engineering the target over the phone, and another co-conspirator who takes any credentials entered at the phishing page and quickly uses them to log in to the target company’s VPN platform in real-time.

Phishing 353

Phishing VPN Social Engineering Media 353

IT Security Guru

MARCH 31, 2023

Phishing attacks, malicious links and social engineering are just a few of the tricks used by cybercriminals to obtain credentials and other valuable information. Cybercriminals can use deep fake technology to impersonate someone you may know or trust to make a social engineering scam even more believable.

Social Engineering 101

Social Engineering Cybersecurity Engineering Media 101

Malwarebytes

JULY 5, 2021

Binance receives the ban hammer from UK’s FCA Fired by algorithm: The future’s here and it’s a robot wearing a white collar Second colossal Linkedin “breach” in 3 months, almost all users affected Police seize DoubleVPN data, servers, and domain PrintNightmare 0-day can be used to take over Windows domain controllers SMS authentication code includes (..)

Cyber Insurance 95

Cyber Insurance Social Engineering Scams Insurance 95

The Last Watchdog

NOVEMBER 29, 2022

The fraudster commences the social engineering by irritating the targeted victim, and then follows up with an an offer to alleviate the annoyance. The nag might be a spoofed multifactor authentication push or system error alert – a notification message that annoying repeats on a seemingly infinite loop.

Phishing 194

Phishing Social Engineering Scams Software 194

SecureWorld News

AUGUST 2, 2021

Here is how the company describes the threat of phishing emails: "Phishing is a common way scammers try to trick you into giving them personal information such as an account username and password, Social Security number, or other personal information. Shareholder-specific communication: @proxydocs.com, @proxypush.com, @prospectusdocs.com.

Phishing 81

Phishing Social Engineering Scams Identity Theft 81

SecureWorld News

DECEMBER 14, 2022

Frank Abagnale, one of the world's most respected authorities on forgery, embezzlement, secure documents, cybercrime, and scams—and subject of the 2002 movie Catch Me If You Can — kicked off Vision 2023: Looking Ahead at Cyber Threats , a half-day educational event held live and recorded on December 13th.

Social Engineering 68

Social Engineering CISO Education Cybercrime 68

Krebs on Security

AUGUST 30, 2022

The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. Image: Cloudflare.com. On that last date, Twilio disclosed that on Aug.

Mobile 276

Mobile Phishing Authentication Accountability 276

Adam Levin

JULY 15, 2020

The personal Twitter accounts of Elon Musk, Barack Obama, Joe Biden, Bill Gates, Jeff Bezos, Kanye West, Warren Buffett in addition to the official corporate accounts of Apple, Uber, and Cash were hijacked for several hours July 15 in an apparent Bitcoin scam. I am giving back to the community.

Hacking 167

Hacking Social Engineering Scams Accountability 167

SecureWorld News

AUGUST 5, 2023

Multi-factor authentication (MFA) is a fundamental component of best practices for account security. Traditionally, this approach to authentication delivers a unique code to a user's email or phone, which is then inputted following the account password. SMS-based MFA MFA via SMS (i.e., However, MFA via SMS is not without its issues.

Social Engineering 78

Social Engineering Authentication Passwords Accountability 78

SC Magazine

MAY 11, 2021

Researchers last week spotted a phishing campaign that leveraged an online email authentication solution from Zix, in hopes that potential victims would be lulled into a false sense of security. But since these types of socially engineered attacks do not make use of these tactics, it evades traditional defenses,” Tobe explained.

Phishing 112

Phishing Authentication Social Engineering Scams 112

Malwarebytes

SEPTEMBER 29, 2023

It’s a fairly elaborate scam which even includes imitation of GitHub’s popular Dependabot feature. To make this scam work, attackers first obtained access tokens belonging to their targets. Whether this was achieved by malware, social engineering or phishing, nobody has the answers at time of writing.

Accountability 108

Accountability Scams Social Engineering Passwords 108

Malwarebytes

DECEMBER 5, 2022

ZDNet reports an interesting form of PayPal scam sent to one of their own writers. The scam is a so-called “triple threat” phish, in that it gives the scammer three different ways to potentially collect some ill gotten gains from potential victims. This is where stages two and three of the scam come into play.

Phishing 97

Phishing Scams Social Engineering Accountability 97

Security Through Education

OCTOBER 27, 2021

Expert Chris Hadnagy advises us, “Unless you’re in the security business or law enforcement, you won’t be familiar with every new scam that pops up. Social-Engineer, LLC saw an almost 350% increase in recognition of phishing emails when using a similar training platform in 2020.

Cybersecurity 137

Cybersecurity Social Engineering Firewall Engineering 137