article thumbnail

68k Phishing Victims are Now Searchable in Have I Been Pwned, Courtesy of CERT Poland

Troy Hunt

They'd observed a phishing campaign that had collected 68k credentials from unsuspecting victims and asked if HIBP may be used to help alert these individuals to their exposure. Last week I was contacted by CERT Poland. Data accumulated by the malicious activity spanned from October 2022 until just last week.

Phishing 338
article thumbnail

The Risk of Weak Online Banking Passwords

Krebs on Security

If you bank online and choose weak or re-used passwords, there’s a decent chance your account could be pilfered by cyberthieves — even if your bank offers multi-factor authentication as part of its login process. Image: Hold Security.

Banking 246
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Busted! Fraud-as-a-Service gang that sold 2FA-proof phishing arrested

Malwarebytes

The Dutch police announced that they arrested two Dutch citizens, aged 24 and 15, for developing and selling phishing panels. For cybercriminals that lacked the technical knowledge or means, the Fraud Family also offered to host the phishing sites and backend panels. 2FA bypass.

Phishing 119
article thumbnail

9 tips to protect your family against identity theft and credit and bank fraud

Webroot

With access to your personal information, bad actors can drain your bank account and damage your credit—or worse. Check out the nine tips below to discover how you can enable family protection and help prevent identity theft and credit and bank fraud. Password management to keep your credentials safe.

article thumbnail

Phishing scam takes $950k from DoorDash drivers

Malwarebytes

A particularly nasty slice of phishing, scamming, and social engineering is responsible for DoorDash drivers losing a group total of around $950k. From here, the driver would be convinced to hand over banking details or log in to a fake portal. How to avoid phishing Block known bad websites. Use a password manager.

Scams 89
article thumbnail

Steer clear of this EE phish that wants your card details

Malwarebytes

The clickable link leads to an imitation EE site which asks for the visitor’s email address and password. Subsequent pages ask for the kind of details typically covered by any phishing scam, such as name, date of birth, and email address. And follow the tips below on how to avoid phishing attacks. Use a password manager.

article thumbnail

Understanding the Essential Pillars of Phishing Mitigation

SecureWorld News

In our most recent Remote Sessions webcast, Roger Grimes, computer security expert and Data-Driven Defense Evangelist for KnowBe4, gave a deep dive on phishing and how to properly mitigate and prevent phishing attacks. What is phishing? Also known as spamming, phishing is typically done through email, SMS, and phone attacks.