Krebs on Security

JULY 24, 2025

KrebsOnSecurity recently heard from a reader whose boss’s email account got phished and was used to trick one of the company’s customers into sending a large payment to scammers. A search at DomainTools found justyjohn50@yahoo.com has been registering one-off phishing domains since at least 2012.

Scams 222

Scams Phishing Cybercrime Accountability 222

Security Affairs

MARCH 28, 2025

Grandoreiro Banking Trojan resurfaces, targeting users in Latin America and Europe in new phishing campaigns. Forcepoint X-Labs researchers warn of new phishing campaigns targeting Latin America and Europe in new phishing campaigns. Attackers also employ encrypted or password-protected files to evade security detection.

Banking 91

Banking Phishing Malware Passwords 91

Krebs on Security

NOVEMBER 9, 2024

” In a hypothetical example, a scammer uses a hacked government email account to request that a service provider place a hold on a specific bank or crypto account that is allegedly subject to a garnishment order, or party to crime that is globally sanctioned, such as terrorist financing or child exploitation. dot-gov emails get hacked.

Hacking 317

Hacking Accountability Government Social Engineering 317

SecureWorld News

JUNE 19, 2025

Bank Sepah, one of Iran's oldest and most strategically essential banks, suffered major outages across its ATMs and online services on June 17th. Harden financial and cloud infrastructure This conflict has already demonstrated the vulnerability of fintech, crypto platforms, and core banking systems.

Internet 98

Internet Internet Banking CISO 98

Penetration Testing

APRIL 8, 2025

Cybercriminals are actively distributing the Grandoreiro banking trojan through large-scale phishing campaigns, primarily targeting banking users in Latin America and Europe. According to a report by Forcepoint X-Labs, this resurgence involves the use of advanced techniques to evade detection and maximize impact.

Phishing 76

Phishing Banking Cybersecurity Malware 76

SecureWorld News

MARCH 20, 2025

March Madness is here, and while fans are busy filling out brackets and making last-minute bets, cybercriminals are running their own full-court presstargeting unsuspecting fans with phishing scams, fake betting apps, and credential-harvesting schemes. This scenario follows the common phishing tactics: strike at personal interest.

Scams 95

Scams Social Engineering Phishing Mobile 95

SecureWorld News

JUNE 4, 2025

In a matter of days, three major cybersecurity incidents have hit the retail and financial services sectors, drawing renewed attention to supply chain vulnerabilities, credential-based attacks, and the increasing value of non-financial customer data. The reputational damage could be immense." That's why MFA adoption remains low in many cases."

Retail 70

Retail Banking Financial Services Social Engineering 70

Security Through Education

JULY 22, 2025

One of the most common tactics threat actors use to trick individuals into giving up sensitive information, like login credentials, is phishing emails. According to Proofpoint’s 2024 report 91% of all cyber-attacks start with phishing. Spear phishing emails on the other hand are carefully crafted to target a specific individual.

Phishing 52

Phishing Social Engineering Accountability Passwords 52

eSecurity Planet

MARCH 31, 2025

Streaming giant Netflix is at the center of a rising wave of online scams, cybersecurity experts warn. Karin Zilberstein, vice president of Product at cybersecurity company Guardio, says the platform consistently ranks among the top 10 most imitated companies in phishing schemes. Instead, visit Netflix.com directly.

Scams 93

Scams Artificial Intelligence Phishing Accountability 93

SecureWorld News

APRIL 13, 2025

In this article, we'll explore how AI enhances cybersecurity, its key benefits, and why businesses are increasingly relying on AI-driven security solutions. How does AI work in cybersecurity? This speeds up response times and reduces the burden on cybersecurity teams.

Cybersecurity 99

Cybersecurity Artificial Intelligence Threat Detection Cyber threats 99

eSecurity Planet

FEBRUARY 26, 2025

Cybercriminals are shifting their focus from emails to text messages, using mishing a more deceptive form of phishing to target mobile users and infiltrate corporate networks, according to new security research by Zimperium. Vishing: Also known as voice phishing. What is mishing? and 9%in Brazil.

Phishing 69

Phishing Mobile Social Engineering Data breaches 69

Hacker's King

OCTOBER 19, 2024

Cybersecurity has become one of the most critical fields in technology, ensuring that data, networks, and systems are protected from unauthorized access and malicious attacks. As cyber threats escalate, the demand for skilled professionals in cybersecurity is skyrocketing. trillion annually.

Cybersecurity 59

Cybersecurity Healthcare Cyber threats Government 59

Hacker's King

DECEMBER 17, 2024

The cybersecurity world has been abuzz with news of a new Linux variant of FASTCash, a sophisticated malware targeting the banking sector. FASTCash has gained notoriety for its ability to bypass banking security protocols, enabling cybercriminals to withdraw massive amounts of cash from ATMs.

Banking 52

Banking Social Engineering Malware Phishing 52

Jane Frankland

MAY 16, 2025

Here’s a breakdown of the most widespread and damaging scams today: Impersonation Scams (51% of fraud cases) where fraudsters pose as: Banks, HMRC, DVLA, or government agencies. Guilt or Authority Pressure: Messages from “your boss,” “the bank,” or “your child” asking for urgent help or discretion.

Scams 130

Scams Password Management Passwords Banking 130

Malwarebytes

JUNE 19, 2025

But that doesn’t take away from the fact that these credentials are in the hands of cybercriminals who can use them for: Account takeovers : Cybercriminals can use stolen credentials to hijack social media, banking, or corporate accounts. Some forms of 2FA can be phished just as easily as a password.

Identity Theft 138

Identity Theft Passwords Phishing Accountability 138

eSecurity Planet

NOVEMBER 6, 2024

In a stunning blow to the city’s cybersecurity defenses, Columbus, Ohio, recently became the target of a massive cyberattack that exposed over half a million residents’ sensitive information. This data reportedly includes everything from names and addresses to Social Security numbers and bank account details.

Ransomware 113

Ransomware Authentication Identity Theft Penetration Testing 113

Malwarebytes

NOVEMBER 5, 2024

With access to your email account, a cybercriminal can find a lot of useful information about you, such as where you bank, your account numbers, your favorite shops, and more. Cybercriminals could use your account to spread spam and phishing emails to your contacts. You should be able to find this option in your account settings.

Accountability 145

Accountability Authentication Banking Malware 145

Malwarebytes

APRIL 30, 2025

They access and exfiltrate sensitive information such as banking details, personal identification numbers, and confidential files. There are several circumstances that make this campaign hard to detect: The cybercriminals send phishing emails from compromised WordPress sites, so the domains themselves appear legitimate and not malicious.

Computers and Electronics 143

Computers and Electronics Identity Theft Phishing Banking 143

SecureWorld News

JULY 17, 2025

banks and financial firms are being targeted by scammers using deepfake videos, AI-generated voices, and advanced chatbots to deceive employees and customers. security leaders and bank executives, defending against this high-tech impostor has become a top priority in 2025. In 2025, U.S. In 2025, numerous U.S.

Banking 110

Banking Scams Social Engineering Financial Services 110

Malwarebytes

APRIL 3, 2025

Recently weve been seeing quite a few phishing campaigns using QR codes in email attachments. The lure and the targets are varied, but the use of a QR code to get someone to visit the phishing site is fast becoming a preferred method for cybercriminals. For example, banking apps will be often be installed on the same device.

Phishing 139

Phishing Banking Mobile Accountability 139

SecureWorld News

FEBRUARY 4, 2025

This made the need for strengthening cybersecurity so apparent to everyone that U.S. The best approach one can adopt is always having cybersecurity at the forefront of their mind whichever aspect of their business they approach. The intersection of localization and cybersecurity Now, how does localization affect cybersecurity?

Marketing 105

Marketing Cybersecurity eCommerce Data breaches 105

Malwarebytes

JULY 16, 2025

At Malwarebytes, we’ve seen emails pretending to be from Amazon that tried to drive customers to fake websites like amazons.digital, a site we block for phishing. Install web protection that can warn you of phishing sites, card skimmers, and other nasties that could lead to your data being taken.

Scams 129

Scams Accountability Phishing Passwords 129

The Last Watchdog

MAY 15, 2025

Yet despite their importance, many lack the cybersecurity expertise and resources to fend off a rising tide of digital threats. AI is now supercharging these threats helping cybercriminals scale attacks, tailor phishing lures, write malware, and even evade detection. For small businesses, smart prioritization is key.

Small Business 113

Small Business Cybercrime Cyber Insurance Phishing 113

Malwarebytes

NOVEMBER 4, 2024

In a data breach notification filed by the Attorney General for the state of Maine, the cybersecurity incident that affected Columbus, Ohio impacted half a million people. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished. Take your time.

Data breaches 114

Data breaches Passwords Phishing Ransomware 114

Malwarebytes

MARCH 17, 2025

Financial information, like your banking credentials and crypto wallets. com (phishing) convertitoremp3[.]it com (Phishing) convertix-api[.]xyz org (Riskware) We don’t just report on threats – we help safeguard your entire digital identity Cybersecurity risks should never spread beyond a headline.

Malware 136

Malware Adware Education Phishing 136

Malwarebytes

DECEMBER 17, 2024

In this case we dont know whos behind the leak, although it seems clear from the screenshots that its a phishing operation and the credit and debit card information was exactly the data they were after. Phishing using websites that were especially set up for this task.

Identity Theft 145

Identity Theft Phishing Banking Accountability 145

IT Security Guru

FEBRUARY 25, 2025

The common maxim in cybersecurity is that the industry is always on the back foot. While cybersecurity practitioners build higher walls, adversaries are busy creating taller ladders. MFA Fatigue: The I Give Up Button in Cybersecurity While MFA is extremely effective at preventing unauthorized access, it is not impervious to abuse.

Social Engineering 118

Social Engineering Authentication Risk Accountability 118

SecureWorld News

FEBRUARY 6, 2025

Grubhub confirmed that Marketplace customer passwords, merchant login credentials, full payment card numbers, and bank account details were not exposed. However, even seemingly limited breaches can have downstream effects, enabling phishing attacks and social engineering schemes. How did this happen?

Data breaches 102

Data breaches Accountability Social Engineering Risk 102

Malwarebytes

DECEMBER 6, 2024

The scammers participated in fraudulent phone calls in which they impersonated bank employees to extract sensitive information, such as addresses and security answers, from their victims. A network of fake online shops set up to phish for payment information provided one of the sources of stolen data.

Marketing 113

Marketing Banking Encryption Phishing 113

Security Affairs

NOVEMBER 3, 2024

Chinese threat actors use Quad7 botnet in password-spray attacks FBI arrested former Disney World employee for hacking computer menus and mislabeling allergy info Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide PTZOptics cameras zero-days actively exploited in the wild New LightSpy spyware (..)

Cryptocurrency 111

Cryptocurrency Hacking Phishing Cyber Attacks 111

Security Affairs

APRIL 13, 2025

Compromised data includes full names, contact details, ID numbers, banking information, drivers license numbers, medical records and passport details. “Cell C is aware that data compromised in the recent cybersecurity incident has been unlawfully disclosed by RansomHouse, the threat actor claiming responsibility.”

Data breaches 130

Data breaches Unstructured Data Identity Theft Healthcare 130

The Last Watchdog

JULY 17, 2025

Major contributors include: •Rathi Murthy, CTO of Varo Bank, Fmr. By delivering unparalleled visibility and control directly within the browser, SquareX enables security leaders to reduce their attack surface, gain actionable intelligence, and strengthen their enterprise cybersecurity posture against the newest threat vector – the browser.

CISO 147

CISO Ransomware Banking Media 147

eSecurity Planet

MARCH 28, 2025

From bogus IRS messages to sneaky links designed to swipe your refund (and identity), phishing scams are ramping up. Cybersecurity experts urge the taxpayers to stay sharp and skeptical. Mishing and phishing are two common types to watch out for. Early detection is crucial in mitigating potential damage.

Scams 64

Scams Phishing Identity Theft Accountability 64

SecureWorld News

FEBRUARY 14, 2025

Avoid phishing emails and messages You may receive emails or texts with fake Valentine's Day deals, electronic greeting cards (e-cards), or delivery notifications. Never share sensitive information like address, phone number, or banking details with someone you just met online.

Scams 84

Scams Cybercrime Phishing Social Engineering 84

SecureList

MARCH 25, 2025

Note that for mobile banking malware, we retrospectively revised the 2023 numbers to provide more accurate statistics. We also changed the methodology for PC banking malware by removing obsolete families that no longer use Trojan banker functionality, hence the sharp drop in numbers against 2023. million detections compared to 5.84

Phishing 72

Phishing Banking Scams Mobile 72

Malwarebytes

MARCH 4, 2025

PayPal scammers are using an old Docusign trick to enhance the trustworthiness of their phishing emails. If you think you are the victim of this type of phishing: Check your PayPal account: Log in to your PayPal account and review your recent transactions to search for and identify the suspicious payment.

Scams 135

Scams Accountability Phishing Banking 135

Responsible Cyber

MARCH 2, 2025

But while managing these subscriptions can feel like a mundane task, theres a hidden layer that many overlook: the critical role subscription management plays in cybersecurity. This is where subscription management steps in as a hero and where cybersecurity risks start to creep in if youre not careful.

Cybersecurity 49

Cybersecurity Accountability Banking Scams 49