Banking and Phishing - Cyber Security Informer

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

The Hacker News

OCTOBER 16, 2024

A new spear-phishing campaign targeting Brazil has been found delivering a banking malware called Astaroth (aka Guildma) by making use of obfuscated JavaScript to slip past security guardrails.

Banking

Banking Phishing Malware Retail

SMS About Bank Fraud as a Pretext for Voice Phishing

Krebs on Security

NOVEMBER 10, 2021

Smishing messages usually include a link to a site that spoofs a popular bank and tries to siphon personal information. But increasingly, phishers are turning to a hybrid form of smishing — blasting out linkless text messages about suspicious bank transfers as a pretext for immediately calling and scamming anyone who responds via text.

Banking

Banking Phishing Scams Accountability

See No Evil – NY AG Letitia James Cracks Down on Banks Refusing to Foot the Bill for Consumer Phishing and Fraud

Security Boulevard

SEPTEMBER 27, 2024

Congress decided who was required to compensate for fraudulent consumer transactions, and banks should never require their customers to waive their rights as a condition precedent for the bank doing its job.

Banking

Banking Phishing Security Awareness Cybersecurity

Cybercriminals attack banking customers in EU with V3B phishing kit – PhotoTAN and SmartID supported.

Security Affairs

JUNE 4, 2024

Resecurity uncovered a cybercriminal group that is providing a sophisticated phishing kit, named V3B, to target banking customers in the EU. “Currently, it is estimated that hundreds of cybercriminals are using this kit to commit fraud, leaving victims with empty bank accounts. .

Banking

Banking Phishing Social Engineering Engineering

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

The Hacker News

MARCH 27, 2024

A new phishing campaign has been observed leveraging a novel loader malware to deliver an information stealer and keylogger called Agent Tesla. Trustwave SpiderLabs said it identified a phishing email bearing this attack chain on March 8, 2024. The archive ("Bank Handlowy w Warszawie

Banking

Banking Phishing Malware

When Bank Communication is Indistinguishable from Phishing Attacks

Troy Hunt

NOVEMBER 18, 2019

You know how banks really, really want to avoid their customers falling victim to phishing scams? And how they put a heap of effort into education to warn folks about the hallmarks of phishing scams? And how banks are the shining beacons of light when it comes to demonstrating security best practices? Ah, cheeky phisher!

Banking

Banking Phishing Scams Accountability

New Banking Trojan CHAVECLOAK Targets Brazilian Users via Phishing Tactics

The Hacker News

MARCH 11, 2024

Users in Brazil are the target of a new banking trojan known as CHAVECLOAK that's propagated via phishing emails bearing PDF attachments. This intricate attack involves the PDF downloading a ZIP file and subsequently utilizing DLL side-loading techniques to execute the final malware," Fortinet FortiGuard Labs researcher Cara Lin said.

Banking

Banking Phishing Malware

Massive Phishing Campaigns Target India Banks’ Clients

Trend Micro

NOVEMBER 6, 2022

We found five banking malware families targeting customers of seven banks in India to steal personal and credit card information via phishing campaigns.

Banking

Banking Phishing Malware Cyber threats

LabHost cybercrime service lets anyone phish Canadian bank users

Bleeping Computer

FEBRUARY 27, 2024

The Phishing as a Service (PhaaS) platform 'LabHost' has been helping cybercriminals target North American banks, particularly financial institutes in Canada, causing a notable increase in activity. [.]

Banking

Banking Phishing Cybercrime

Commercial Banking Takes on Reverse Proxy Phishing

Security Boulevard

JANUARY 24, 2024

The online commercial banking industry is experiencing a rising challenge with the subtle yet impactful presence of reverse proxy attacks, particularly in the form of reverse proxy phishing. Read on […] The post Commercial Banking Takes on Reverse Proxy Phishing appeared first on Security Boulevard.

Banking

Banking Phishing Digital transformation

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

The Hacker News

MAY 19, 2024

The threat actors behind the Windows-based Grandoreiro banking trojan have returned in a global campaign since March 2024 following a law enforcement takedown in January.

Banking

Banking Phishing Malware

Credential phishing attack impersonates Bank of America

Tech Republic Security

JUNE 18, 2020

The phishing email leads recipients to a phony BOA landing page in an attempt to steal their banking credentials, according to Armorblox.

Banking

Banking Phishing

Cyber Security in Banking: Threats, Solutions & Best Practices

eSecurity Planet

SEPTEMBER 13, 2024

Cyber security in banking has become the frontline defense against an ever-growing wave of digital threats. With billions of dollars and sensitive data at risk, banks are under constant pressure to stay one step ahead of cybercriminals. Table of Contents Toggle What is Cyber Security in Banking?

Banking

Banking Identity Theft Cyber threats DDOS

New Phishing Campaigns Exploit PWAs and WebAPKs to Target Mobile Banking Users

Penetration Testing

AUGUST 21, 2024

A recent report from ESET reveals a sophisticated series of phishing campaigns targeting mobile banking users across Czechia and beyond.

Banking

Banking Mobile Phishing Cybersecurity

Rocinante Banking Malware: Keylogging, Phishing, and Full Device Takeover

Penetration Testing

AUGUST 29, 2024

ThreatFabric, a prominent cybersecurity firm, has issued a warning about a new strain of banking malware dubbed “Rocinante,” currently targeting customers of Brazilian financial institutions.

Banking

Banking Phishing Malware Cybersecurity

A phishing campaign targets clients of German banks using QR codes

Security Affairs

DECEMBER 12, 2021

Cofense researchers discovered a new phishing campaign using QR codes targeting German e-banking users in the last weeks. Threat actors continue to use multiple techniques to avoid detection and trick recipients into opening phishing messages, including the use of QR codes. “The phish sites are fairly similar.

Banking

Banking Phishing Social Engineering Engineering

Phishing attacks target mobile users via progressive web applications (PWA)

Security Affairs

AUGUST 23, 2024

Cybercriminals use progressive web applications (PWA) to impersonate banking apps and steal credentials from mobile users. ESET researchers detailed a phishing campaign against mobile users that uses Progressive Web Applications (PWAs). On Android, these phishing WebAPKs even appear to have been installed from the Google Play store.”

Phishing

Phishing Mobile Banking Social Engineering

Android banking trojans: How they steal passwords and drain bank accounts

Malwarebytes

FEBRUARY 27, 2024

For the most popular operating system in the world—which is Android and it isn’t even a contest —there’s a sneaky cyberthreat that can empty out a person’s bank accounts to fill the illicit coffers of cybercriminals. What are Android banking trojans? Take the SharkBot banking trojan, which Malwarebytes detects and stops.

Banking

Banking Passwords Accountability Malware

Report: Big U.S. Banks Are Stiffing Account Takeover Victims

Krebs on Security

OCTOBER 7, 2022

consumers have their online bank accounts hijacked and plundered by hackers, U.S. But new data released this week suggests that for some of the nation’s largest banks, reimbursing account takeover victims has become more the exception than the rule. Bank , and Wells Fargo. ” Sen.

Banking

Banking Accountability Scams Passwords

Robin Banks phishing service returns to steal banking accounts

Bleeping Computer

NOVEMBER 4, 2022

The Robin Banks phishing-as-a-service (PhaaS) platform is back in action with infrastructure hosted by a Russian internet company that offers protection against distributed denial-of-service (DDoS) attacks. [.].

Banking

Banking Phishing Accountability DDOS

68k Phishing Victims are Now Searchable in Have I Been Pwned, Courtesy of CERT Poland

Troy Hunt

AUGUST 30, 2023

They'd observed a phishing campaign that had collected 68k credentials from unsuspecting victims and asked if HIBP may be used to help alert these individuals to their exposure. Last week I was contacted by CERT Poland. Data accumulated by the malicious activity spanned from October 2022 until just last week.

Phishing

Phishing Password Management Passwords Banking

Secure Your World with Phishing Resistant Passkeys

Thales Cloud Protection & Licensing

OCTOBER 9, 2024

Secure Your World with Phishing Resistant Passkeys madhav Thu, 10/10/2024 - 05:12 As we celebrate Cybersecurity Awareness Month 2024 with the theme "Secure Our World," exploring innovative technologies is crucial to help us achieve this goal. One such advancement that's revolutionizing online security and user authentication is passkeys.

Phishing

Phishing Authentication Passwords Identity Theft

Attackers use stolen banking data as phishing lure to deploy BitRAT

CSO Magazine

JANUARY 4, 2023

In a case that highlights how attackers can leverage information from data breaches to enhance their attacks, a group of attackers is using customer information stolen from a Colombian bank in phishing attacks with malicious documents, researchers report.

Banking

Banking Phishing Data breaches Marketing

Grandoreiro Banking Trojan is back and targets banks worldwide

Security Affairs

MAY 19, 2024

A new Grandoreiro banking trojan campaign has been ongoing since March 2024, following the disruption by law enforcement in January. IBM X-Force warns of a new Grandoreiro banking trojan campaign that has been ongoing since March 2024. The banking Trojan is likely operated as a Malware-as-a-Service (MaaS).

Banking

Banking Malware Antivirus Accountability

Iran’s Phishing Pandemic: 245 Fake Banking Apps Target Citizens

Penetration Testing

DECEMBER 1, 2023

A recent report by Zimperium has revealed the discovery of 245 counterfeit mobile applications, designed to mimic... The post Iran’s Phishing Pandemic: 245 Fake Banking Apps Target Citizens appeared first on Penetration Testing.

Banking

Banking Phishing Penetration Testing Cybercrime

Phishing attacks use QR codes to steal banking credentials

Bleeping Computer

DECEMBER 10, 2021

A new phishing campaign that targets German e-banking users has been underway in the last couple of weeks, involving QR codes in the credential-snatching process. [.].

Banking

Banking Phishing

The V3B Phishing Kit Affects Customers of 54 European Banks

Heimadal Security

JUNE 7, 2024

A new phishing kit known as ‘V3B’ is being promoted on Telegram by cybercriminals. Priced between $130 and $450 per month depending on what is purchased, the phishing kit features advanced obfuscation, […] The post The V3B Phishing Kit Affects Customers of 54 European Banks appeared first on Heimdal Security Blog.

Banking

Banking Phishing Cybersecurity

Truist bank confirms data breach

Malwarebytes

JUNE 14, 2024

On Wednesday June 12, 2024, a well-known dark web data broker and cybercriminal acting under the name “Sp1d3r” offered a significant amount of data allegedly stolen from Truist Bank for sale. Truist is a US bank holding company and operates 2,781 branches in 15 states and Washington DC. Watch out for fake vendors.

Data breaches

Data breaches Banking Passwords Phishing

New ‘Robin Banks’ phishing service targets BofA, Citi, and Wells Fargo

Bleeping Computer

JULY 27, 2022

A new phishing as a service (PhaaS) platform named 'Robin Banks' has been launched, offering ready-made phishing kits targeting the customers of well-known banks and online services. [.].

Banking

Banking Phishing

Robin Banks Phishing Service for Cybercriminals Returns with Russian Server

The Hacker News

NOVEMBER 6, 2022

A phishing-as-a-service (PhaaS) platform known as Robin Banks has relocated its attack infrastructure to DDoS-Guard, a Russian provider of bulletproof hosting services. Robin Banks was

Banking

Banking Phishing DDOS Cybersecurity

PayPal Phishing Scam Uses Invoices Sent Via PayPal

Krebs on Security

AUGUST 18, 2022

” A copy of the phishing message included in the PayPal.com invoice. While the phishing message attached to the invoice is somewhat awkwardly worded, there are many convincing aspects of this hybrid scam. Details of this scam were shared Wednesday with PayPal’s anti-abuse (phish@paypal.com) and media relations teams.

Scams

Scams Phishing Accountability Software

GUEST ESSAY: Consumers, institutions continue to shoulder burden for making mobile banking secure

The Last Watchdog

JULY 17, 2024

The rapid adoption of mobile banking has revolutionized how we manage our finances. Related: Deepfakes aimed at mobile banking apps With millions of users worldwide relying on mobile apps for their banking needs, the convenience is undeniable. Alarmingly, 85% of banks are predicted to be at risk from rising cyber threats.

Banking

Banking Mobile Cyber Attacks Encryption

Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months

The Hacker News

JULY 15, 2024

Retail banking institutions in Singapore have three months to phase out the use of one-time passwords (OTPs) for authentication purposes when signing into online accounts to mitigate the risk of phishing attacks. Customers who have activated their digital

Banking

Banking Retail Phishing Authentication

Spear-phishing Alert: Hackers Impersonate Truist Bank in an Attempt to Dispatch Malware

Heimadal Security

MAY 18, 2021

In a spear-phishing campaign, Truist Financial Corporation has been impersonated by cybercriminals trying to spread malware that seemed to look like remote access trojan (RAT), a program used by hackers to take complete control of the victim’s computer to perform malicious activities. Truist Financial Corp. Truist Financial Corp.

Banking

Banking Phishing Malware Cybersecurity

Rocinante Trojan Poses as Banking Apps to Steal Sensitive Data from Brazilian Android Users

The Hacker News

SEPTEMBER 3, 2024

Mobile users in Brazil are the target of a new malware campaign that delivers a new Android banking trojan named Rocinante. Finally, it can use all this exfiltrated

Banking

Banking Mobile Phishing Malware

FBI spots spear-phishing posing as Truist Bank bank to deliver malware

Bleeping Computer

MAY 17, 2021

bank holding company, in a spear-phishing campaign attempting to infect recipients with what looks like remote access trojan (RAT) malware. [.]. Threat actors impersonated Truist, the sixth-largest U.S.

Banking

Banking Phishing Malware

New V3B phishing kit targets customers of 54 European banks

Bleeping Computer

JUNE 4, 2024

Cybercriminals are promoting a new phishing kit named 'V3B' on Telegram, which currently targets customers of 54 major financial institutes in Ireland, the Netherlands, Finland, Austria, Germany, France, Belgium, Greece, Luxembourg, and Italy. [.]

Phishing

Phishing Banking

A Bank SMS Text Phish Attempt

Security Boulevard

DECEMBER 12, 2021

Phishing attempts over text messages are becoming more prevalent. I received an SMS text message that contained a phishing attempt for a Canadian Bank. The message implied that I have received a new notification with this bank and I should visit the provided link.

Banking

Banking Phishing Scams

Hackers Use QR Codes to Steal Banking Credentials in Recent Phishing Attempts

Heimadal Security

DECEMBER 13, 2021

Over the last few weeks, a new phishing operation focusing on e-banking users from Germany has been in progress, using QR codes during the credential-stealing operation. The post Hackers Use QR Codes to Steal Banking Credentials in Recent Phishing Attempts appeared first on Heimdal Security Blog.

Banking

Banking Phishing Cybersecurity

Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants

The Hacker News

JUNE 9, 2023

Banking and financial services organizations are the targets of a new multi-stage adversary-in-the-middle (AitM) phishing and business email compromise (BEC) attack, Microsoft has revealed.

Banking

Banking Phishing Financial Services

Banking malware Grandoreiro returns after police disruption

Bleeping Computer

MAY 18, 2024

The banking trojan "Grandoreiro" is spreading in a large-scale phishing campaign in over 60 countries, targeting customer accounts of roughly 1,500 banks. [.]

Banking

Banking Malware Phishing Accountability

U.K. Arrest in ‘SMS Bandits’ Phishing Service

Krebs on Security

FEBRUARY 1, 2021

Authorities in the United Kingdom have arrested a 20-year-old man for allegedly operating an online service for sending high-volume phishing campaigns via mobile text messages. ” SMS Bandits offered an SMS phishing (a.k.a. Image: osint.fans. “But on the telecom front they were using fairly sophisticated tactics.”

Phishing

Phishing Telecommunications Advertising Mobile

Phishing campaigns against Chase Bank customers are on the rise

Tech Republic Security

OCTOBER 5, 2021

Throughout the summer of 2021, the number of phishing URLs designed to impersonate Chase jumped by 300%, says security firm Cyren.

Phishing

Phishing Banking

SMS Phishing + Cardless ATM = Profit

Krebs on Security

NOVEMBER 2, 2018

Thieves are combining SMS-based phishing attacks with new “cardless” ATMs to rapidly convert phished bank account credentials into cash. That phishing site prompted visitors to enter their account credentials — including usernames, passwords, one-time passcodes and PIN numbers — to unlock their accounts.

Phishing

Phishing Banking Scams Accountability

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

SMS About Bank Fraud as a Pretext for Voice Phishing

Trending Sources

See No Evil – NY AG Letitia James Cracks Down on Banks Refusing to Foot the Bill for Consumer Phishing and Fraud

Cybercriminals attack banking customers in EU with V3B phishing kit – PhotoTAN and SmartID supported.

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

When Bank Communication is Indistinguishable from Phishing Attacks

New Banking Trojan CHAVECLOAK Targets Brazilian Users via Phishing Tactics

Massive Phishing Campaigns Target India Banks’ Clients

LabHost cybercrime service lets anyone phish Canadian bank users

Commercial Banking Takes on Reverse Proxy Phishing

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

Credential phishing attack impersonates Bank of America

Cyber Security in Banking: Threats, Solutions & Best Practices

New Phishing Campaigns Exploit PWAs and WebAPKs to Target Mobile Banking Users

Rocinante Banking Malware: Keylogging, Phishing, and Full Device Takeover

A phishing campaign targets clients of German banks using QR codes

Phishing attacks target mobile users via progressive web applications (PWA)

Android banking trojans: How they steal passwords and drain bank accounts

Report: Big U.S. Banks Are Stiffing Account Takeover Victims

Robin Banks phishing service returns to steal banking accounts

68k Phishing Victims are Now Searchable in Have I Been Pwned, Courtesy of CERT Poland

Secure Your World with Phishing Resistant Passkeys

Attackers use stolen banking data as phishing lure to deploy BitRAT

Grandoreiro Banking Trojan is back and targets banks worldwide

Iran’s Phishing Pandemic: 245 Fake Banking Apps Target Citizens

Phishing attacks use QR codes to steal banking credentials

The V3B Phishing Kit Affects Customers of 54 European Banks

Truist bank confirms data breach

New ‘Robin Banks’ phishing service targets BofA, Citi, and Wells Fargo

Robin Banks Phishing Service for Cybercriminals Returns with Russian Server

PayPal Phishing Scam Uses Invoices Sent Via PayPal

GUEST ESSAY: Consumers, institutions continue to shoulder burden for making mobile banking secure

Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months

Spear-phishing Alert: Hackers Impersonate Truist Bank in an Attempt to Dispatch Malware

Rocinante Trojan Poses as Banking Apps to Steal Sensitive Data from Brazilian Android Users

FBI spots spear-phishing posing as Truist Bank bank to deliver malware

New V3B phishing kit targets customers of 54 European banks

A Bank SMS Text Phish Attempt

Hackers Use QR Codes to Steal Banking Credentials in Recent Phishing Attempts

Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants

Banking malware Grandoreiro returns after police disruption

U.K. Arrest in ‘SMS Bandits’ Phishing Service

Phishing campaigns against Chase Bank customers are on the rise

SMS Phishing + Cardless ATM = Profit

Stay Connected