CSO Magazine

MAY 31, 2023

Phishing was the most common type of identity-related incident in 2022, according to a study by Identity Defined Security Alliance (IDSA), a non-profit, identity and security intelligence firm.

Phishing 90

Phishing Security Intelligence 90

CSO Magazine

OCTOBER 4, 2021

Learn 8 types of phishing attacks and how to identify them and how BEC attacks take phishing to the next level. Sign up for CSO newsletters. ].

CSO 131

CSO Phishing Accountability 131

CSO Magazine

AUGUST 23, 2021

These include SMS/text-based phishing, SIM swapping and unauthorized number porting. Related: The T-Mobile data breach: A timeline | Get the latest from CSO by signing up for our newsletters. ] To read this article in full, please click here

Mobile 144

Mobile CSO Data breaches Phishing 144

CSO Magazine

MAY 25, 2022

Computer vision cybersecurity startup PIXM has expanded its line of antiphishing products with the launch of PIXM Mobile, a solution to protect individuals and enterprises from targeted and unknown phishing attacks on mobile devices. To read this article in full, please click here

Mobile 115

Mobile Phishing Media Technology 115

CSO Magazine

MAY 29, 2023

A new phishing technique can leverage the “file archiver in browser” exploit to emulate an archiving software in the web browser when a victim visits a.zip domain, according to a security researcher identifying as mr.d0x. Performing this attack first requires you to emulate a file archive software using HTML/CSS,” said mr.d0x in a blog post.

Phishing 100

Phishing Software 100

CSO Magazine

MARCH 13, 2023

Phishing attempts are typically like fishing in a barrel — given enough time, a bad actor is 100% likely to reel in a victim. Once they recognize organizations as habitually vulnerable, they will continue to target them and the barrel-fishing cycle goes on and on.

Phishing 131

Phishing 131

CSO Magazine

APRIL 30, 2021

Sign up for CSO newsletters. ]. Spear-phishing attack targets Russian defense contractor. In this instance, the target of the spear-phishing attack was a general director working at the Rubin Design Bureau, a Russia-based defense contractor that designs nuclear submarines for the Russian Federation’s Navy.

CSO 129

CSO Phishing Cybersecurity 129

CSO Magazine

OCTOBER 7, 2021

This historic increase in cybercrime resulted in everything from financial fraud involving CARES Act stimulus funds and Paycheck Protection Program (PPP) loans to a spike in phishing schemes and bot traffic. Get the latest from CSO by signing up for our newsletters. ] Learn the The 5 types of cyberattack you're most likely to face. |

CSO 138

CSO Cybersecurity Cybercrime Phishing 138

CSO Magazine

OCTOBER 19, 2021

Whether it’s advanced phishing techniques, credential stuffing, or even credentials compromised through social engineering or breaches of a third-party service, credentials are easily the most vulnerable point in defending corporate systems. Get the latest from CSO by signing up for our newsletters. ]

Authentication 130

Authentication CSO Social Engineering Engineering 130

CSO Magazine

JANUARY 11, 2023

Security researchers have used the GPT-3 natural language generation model and the ChatGPT chatbot based on it to show how such deep learning models can be used to make social engineering attacks such as phishing or business email compromise scams harder to detect and easier to pull off.

Scams 127

Scams Phishing Social Engineering Engineering 127

CSO Magazine

APRIL 26, 2023

Iranian state-sponsored threat actor, Educated Manticore, has been observed deploying an updated version of Windows backdoor PowerLess to target Israel for phishing attacks, according to a new report by Check Point. To read this article in full, please click here

Phishing 102

Phishing Education Hacking 102

CSO Magazine

APRIL 7, 2022

Spear phishing definition. Spear phishing is a targeted email attack purporting to be from a trusted sender. In spear phishing attacks, attackers often use information gleaned from research to put the recipient at ease. To read this article in full, please click here

Phishing 101

Phishing Social Engineering Engineering Malware 101

CSO Magazine

JANUARY 4, 2023

In a case that highlights how attackers can leverage information from data breaches to enhance their attacks, a group of attackers is using customer information stolen from a Colombian bank in phishing attacks with malicious documents, researchers report. Stolen data used to add credibility to future attacks.

Banking 118

Banking Phishing Data breaches Marketing 118

CSO Magazine

JUNE 8, 2023

Cybersecurity vendor Guardz has announced the release of a new AI-powered phishing protection solution to help small- and medium-sized businesses (SMBs) and managed service providers (MSPs) prevent phishing attacks. To read this article in full, please click here

Phishing 72

Phishing Small Business Data breaches Technology 72

CSO Magazine

MAY 24, 2023

Emails containing the unique SuperMailer string barely registered in January and February, but in the first half of May they accounted for over 5% of credential phishing emails.” To read this article in full, please click here

Phishing 92

Phishing Cyber threats Network Security Accountability 92

CSO Magazine

OCTOBER 28, 2022

Email security and threat detection company Vade has found that phishing emails in the third quarter this year increased by more than 31% quarter on quarter, with the number of emails containing malware in the first three quarters surpassing the 2021 level by 55.8

Phishing 128

Phishing Threat Detection Malware 128

CSO Magazine

DECEMBER 8, 2021

When it comes to cybersecurity, phishing is one of the oldest tricks in the book. Phishing has evolved,” says Chester Wisniewski, principal research scientist at Sophos. These days phishing emails often lead to ransomware, crypto jacking, or data theft. But it is still incredibly hard to defend against. The reason?

Phishing 111

Phishing Ransomware Cybersecurity 111

CSO Magazine

JULY 28, 2022

Microsoft toppled Facebook for the top spot in the 25 most impersonated brands by phishers in the first half of 2022, with a total of 11,041 unique phishing URLs, according to Vade's latest Phishers' Favorites report. To read this article in full, please click here

Phishing 90

Phishing Malware 90

CSO Magazine

APRIL 25, 2023

Phishing attacks are one of the most significant threats that organizations face today. As businesses increasingly rely on digital communication channels, cybercriminals exploit email, SMS, and voice communication vulnerabilities to launch sophisticated phishing attacks.

Phishing 88

Phishing Retail Education Risk 88

CSO Magazine

MAY 26, 2021

Phishing simulations—or phishing tests—have become a popular feature of cybersecurity training programs in organizations of all sizes.

Phishing 130

Phishing Authentication Cybersecurity 130

CSO Magazine

MARCH 4, 2022

Facebook jumped to the top spot in the 20 most impersonated brands by phishers in 2021, representing 14% of phishing pages, according to Vade's annual Phishers' Favorites report. To read this article in full, please click here

Phishing 97

Phishing Malware 97

CSO Magazine

MARCH 22, 2023

Phishing is a big problem that’s getting even bigger as cybercriminals find new ways to hook employees. When they do, and that phishing attack leads to a damaging data breach, who’s at fault? The phishing ‘click this, not that’ contradiction To read this article in full, please click here

Phishing 72

Phishing Data breaches Mobile Marketing 72

CSO Magazine

APRIL 6, 2021

Check out these 11 phishing prevention tips for best technology practices, employee education and social media smarts. | Get the latest from CSO by signing up for our newsletters. ] To read this article in full, please click here

Cybercrime 121

Cybercrime CSO Education Media 121

CSO Magazine

JULY 1, 2021

Despite advancements in anti-phishing techniques and employee training, phishing attacks are increasingly popular. After all, employees need to click on links to do their jobs, and social engineering makes phishing links difficult to identify. That’s because they work so well.

Phishing 112

Phishing Social Engineering Engineering 112

CSO Magazine

MAY 27, 2021

These credentials fuel the underground economy and are used for everything from spam to phishing and account takeovers. Get the latest from CSO by signing up for our newsletters. ] Credential stuffing attacks are one of the most common ways cybercriminals abuse stolen usernames and passwords.

CSO 119

CSO Passwords Data breaches Accountability 119

CSO Magazine

OCTOBER 20, 2022

As phishing attacks increase, preventing them from doing damage is proving costly for organizations. Phishing-related activities are consuming a third of the total time available to IT and security teams and costing organizations anywhere between $2.84 per phishing email, according to a new report by Osterman Research.

Phishing 82

Phishing 82

CSO Magazine

JUNE 14, 2023

Researchers investigating an Office 365 account compromise resulting from an adversary-in-the-middle (AitM) phishing attack found evidence of a much larger global attack campaign that spans the past year and is possibly tied to an infostealer malware called FormBook. "In

Phishing 99

Phishing Accountability Malware Cybersecurity 99

CSO Magazine

NOVEMBER 21, 2022

Palo Alto’s Unit 42 has investigated several incidents linked to the Luna Moth group callback phishing extortion campaign targeting businesses in multiple sectors, including legal and retail. Luna Moth removes malware portion of phishing callback attack. This malware element is synonymous with traditional callback phishing attacks.

Phishing 76

Phishing Malware Social Engineering Retail 76

CSO Magazine

APRIL 11, 2023

Cybersecurity provider ZeroFox has announced a partnered capability with Google Cloud to warn users of malicious URLs and fake websites in a bid to disrupt phishing campaigns.

Phishing 79

Phishing Risk Cybersecurity 79

CSO Magazine

SEPTEMBER 28, 2021

Studies show that CSO readers are most likely to know that endpoint protection is the modern iteration of the antivirus tools of previous generations. Threat vectors for end-user devices include browser-based attacks, phishing attempts, malicious software, or spyware.

Antivirus 124

Antivirus CSO Spyware Phishing 124

CSO Magazine

APRIL 13, 2022

In his career, he has seen people pick up and use dropped thumb drives, give up passwords over the phone and, yes, even click on simulated phishing links. Sign up for CSO newsletters. ]. He has also seen the real-world consequences of such actions.

Penetration Testing 95

Penetration Testing CSO Phishing Passwords 95

CSO Magazine

SEPTEMBER 14, 2022

Cybersecurity startup novoShield has launched an enterprise-grade mobile security application , designed to protect users from mobile phishing threats. Released this week for iPhones via the US and Israeli Apple app stores, novoShield’s namesake app detects malicious websites in real time and blocks users from accessing them.

Mobile 98

Mobile Phishing Cybersecurity Software 98

CSO Magazine

JANUARY 20, 2021

Rather than attack us through our operating systems, attackers have targeted remote control tools, our consultants, and most importantly our users via phishing attacks. As a result, attackers have pivoted to different methods. To read this article in full, please click here (Insider Story)

Phishing 114

Phishing 114

CSO Magazine

APRIL 24, 2023

Akamai is rolling out a new service designed to provide automated detection, investigation and even takedown services for businesses looking to protect their online reputations from digital criminals and phishing campaigns.

Phishing 75

Phishing 75

CSO Magazine

AUGUST 25, 2022

This represented a 3% increase compared to Q1 2022, the firm stated, with phishing toolkits playing a key role in malicious domain-related activity. Increased malware, phishing, C2 domain activity detected in Q2 2022. of devices accessed phishing domains with 0.8% of devices accessed phishing domains with 0.8%

DNS 69

DNS Phishing Malware Ransomware 69

CSO Magazine

JULY 12, 2022

Security researchers from Microsoft have uncovered a large-scale phishing campaign that uses HTTPS proxying techniques to hijack Office 365 accounts. The attack is capable of bypassing multi-factor authentication (MFA) and has targeted over 10,000 organizations since September 2021.

Phishing 98

Phishing Accountability Authentication Internet 98

CSO Magazine

SEPTEMBER 14, 2022

One of the most prolific state-sponsored Iranian cyber espionage groups is targeting researchers from different fields by setting up sophisticated spear-phishing lures in which they use multiple fake personas inside the same email thread for increased credibility.

Phishing 76

Phishing Social Engineering Engineering 76