The Hacker News

SEPTEMBER 30, 2024

More than 140,000 phishing websites have been found linked to a phishing-as-a-service (PhaaS) platform named Sniper Dz over the past year, indicating that it's being used by a large number of cybercriminals to conduct credential theft.

Phishing 128

Phishing Cyber Attacks 128

Penetration Testing

MAY 2, 2025

A new threat intelligence report from EclecticIQ unveils the evolving tradecraft of Luna Moth, a financially motivated threat The post Luna Moth’s Callback Phishing Attacks Target US Legal and Financial Firms appeared first on Daily CyberSecurity.

Phishing 74

Phishing Cybersecurity Social Engineering Cyber Attacks 74

Digital Shadows

JANUARY 22, 2025

Phishing Remains Top Tactic, Fueled by Teams Abuse Figure 1: Top attack techniques in true-positive customer incidents for finance & insurance sector, H2 2024 vs H2 2023 Phishing dominated cyber attacks in H2 2024, accounting for over 90% of incidents across industries due to its simplicity and effectiveness.

Insurance 65

Insurance Phishing Social Engineering Engineering 65

Digital Shadows

NOVEMBER 26, 2024

Key Points Phishing incidents rose during the reporting period (August 1 to October 31, 2024), accounting for 46% of all customer incidents. This increase is likely driven by high employee turnover and easy access to phishing kits. Meanwhile, “RansomHub” is rising rapidly due to its attractive ransomware-as-a-service (RaaS) model.

Cyber Attacks 59

Cyber Attacks Phishing Ransomware Cyber Insurance 59

The Hacker News

JUNE 9, 2024

Cybersecurity researchers have disclosed details of a threat actor known as Sticky Werewolf that has been linked to cyber attacks targeting entities in Russia and Belarus.

Cyber Attacks 127

Cyber Attacks Phishing Government Cybersecurity 127

SecureWorld News

APRIL 29, 2025

Phishing scams, money transfer requests, and the use of fake travel tickets may also increase during this time." "This will be a crucial time for the affected countries to stay vigilant for any opportunistic threat actors looking to get access and exploit the nation's security systems and the common public alike.

Cyber Attacks 77

Cyber Attacks Energy and Utilities Telecommunications Cybersecurity 77

CyberSecurity Insiders

MAY 7, 2023

It is not accurate to say that 5G networks are completely immune to cyber attacks. Like any other network, 5G networks are vulnerable to various types of cyber attacks, such as distributed denial-of-service (DDoS) attacks, phishing attacks, and malware infections.

Cyber Attacks 123

Cyber Attacks Architecture Technology DDOS 123

CyberSecurity Insiders

JANUARY 17, 2022

North Korea, the nation that is being led by Kim Jong UN is back into news headlines for stealing cryptocurrency worth millions through cyber attacks. The post North Korea steals $400m cryptocurrency through Cyber Attacks appeared first on Cybersecurity Insiders.

Cryptocurrency 135

Cryptocurrency Cyber Attacks Social Engineering Banking 135

CyberSecurity Insiders

FEBRUARY 8, 2022

Microsoft has made it official that it has disabled macros across its office products to block malware cyber attacks. The post Microsoft disables macros to curtail Malware Cyber Attacks appeared first on Cybersecurity Insiders.

Cyber Attacks 137

Cyber Attacks Malware Identity Theft Cyber Risk 137

Security Affairs

NOVEMBER 27, 2021

Threat actors are targeting IKEA employees in an internal phishing campaign leveraging stolen reply-chain emails. According to BleepingComputer, threat actors are targeting IKEA employees in phishing attacks using stolen reply-chain emails. “There is an ongoing cyber-attack that is targeting Inter IKEA mailboxes.

Cyber Attacks 145

Cyber Attacks Phishing Malware Hacking 145

CyberSecurity Insiders

OCTOBER 24, 2021

A recent statement issued by the Summer Olympics Organizer from Japan revealed that the cyber threat to the games event was so intense that the organizing committee had to hire a third party firm that with a dedicated team of 200 Cybersecurity specialists helped thwart over 500 million or half a billion cyber attacks.

Cyber Attacks 141

Cyber Attacks Cyber Risk Backups Education 141

Centraleyes

MARCH 20, 2025

Phishing Campaign Detection: A healthcare provider used email traffic heat maps to identify unusual spikes in phishing emails targeting specific departments. Cyber attack data visualization bridges this gap, making technical cyber security data accessible to non-technical audiences.

Cyber Attacks 52

Cyber Attacks Risk Cybersecurity Ransomware 52

Security Affairs

NOVEMBER 3, 2024

Chinese threat actors use Quad7 botnet in password-spray attacks FBI arrested former Disney World employee for hacking computer menus and mislabeling allergy info Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide PTZOptics cameras zero-days actively exploited in the wild New LightSpy spyware (..)

Cryptocurrency 111

Cryptocurrency Hacking Phishing Cyber Attacks 111

CyberSecurity Insiders

MARCH 14, 2022

Because of some vulnerabilities in solar panels and smart devices, security experts state that the Australian Electricity Grid is becoming super vulnerable to cyber attacks. The post Australian electric grid vulnerable to Cyber Attacks via Solar Panels appeared first on Cybersecurity Insiders.

Cyber Attacks 131

Cyber Attacks CSO Manufacturing Cyber threats 131

Security Affairs

DECEMBER 9, 2024

Romanian energy supplier Electrica Group is investigating an ongoing ransomware attack impacting its operations. Romanian energy supplier Electrica Group suffered a cyber attack that is impacting its operations. “Electrica Group is under a cyber attack. The company serves over 3.8 ” reads the note.

Ransomware 120

Ransomware Cyber Attacks Cybercrime Marketing 120

Security Affairs

APRIL 30, 2025

. “The analyses of the TTPs used during APT28 campaigns since 2021 and the recommendations published in October of 2023 remain relevant and may be consulted on the website of the CERT-FR” APT28’s attack chain begins with phishing and brute-force attacks, along with zero-day exploitation (e.g. CVE-2023-23397 ).

Government 116

Government Phishing DNS VPN 116

CyberSecurity Insiders

MAY 11, 2023

Tokyo MoU, the most active regional port control organization in the Asia Pacific, has revealed that its data was compromised for months and that hackers gained fraudulent access through a cyber attack. It is unclear how the attack has impacted the servers of the Port State Control (PSC) platform.

Cyber Attacks 113

Cyber Attacks Social Engineering Engineering Phishing 113

SecureWorld News

DECEMBER 4, 2024

The United States retail sector faced an especially aggressive wave of cyber threats, with phishing attacks mimicking major holiday brands [3] including Walmart, Target, and Best Buy increasing by more than 2,000% during peak shopping periods. Also lock down your brand name with official registrations.

Retail 114

Retail Scams Phishing Cyber threats 114

CyberSecurity Insiders

FEBRUARY 17, 2023

Succession Wealth, a financial wealth management service offering company, has released a press statement that a cyber attack targeted its servers and it can only reveal details after the investigation gets concluded. Prima Facie revealed that hackers accessed no client data in the attack.

Cyber Attacks 129

Cyber Attacks Identity Theft Insurance Social Engineering 129

Security Affairs

MAY 13, 2025

No action is required, but customers should be cautious of potential phishing attempts, as M&S will never request personal account info. .” The stolen M&S data may include contact info, birthdate, order history, household data, and masked card details, but not full payment info.

Data breaches 62

Data breaches Cyber Attacks Passwords Social Engineering 62

CyberSecurity Insiders

FEBRUARY 19, 2023

Go Daddy, that servers about 21 million entrepreneurs and offers 84 million web domains to its customers has approached a forensic firm and law enforcement to block the intentions of hackers to run phishing malware distribution and other malicious campaigns.

Cyber Attacks 128

Cyber Attacks Manufacturing Malware Government 128

The Last Watchdog

OCTOBER 23, 2024

Cybersecurity training for small businesses is critical, and SMBs should invest in training programs to help employees recognize threats such as phishing attacks, ransomware, and other malicious activities. Many cyber attacks exploit vulnerabilities in outdated software.

Small Business 162

Small Business Data breaches Backups Passwords 162

Approachable Cyber Threats

MARCH 12, 2025

Category Awareness, Social Enginering Risk Level Phishing emails are getting harder to detect. What is phishing, and why is it such a big deal?" Phishing is one of the oldest tricks in the hacker playbook - but its also one of the most effective. Alright, but cant I just spot and delete phishing emails?"

Phishing 52

Phishing Scams Social Engineering Artificial Intelligence 52

CyberSecurity Insiders

MAY 18, 2023

Phishing attacks via SMS operations have been their preferred method of targeting victims. In other news, Microsoft has introduced an interesting approach to assign weather-related nomenclature to nations engaged in espionage and cyber attacks.

Cyber Attacks 110

Cyber Attacks Education Software Phishing 110

The Hacker News

JULY 30, 2024

The nation-state threat actor known as SideWinder has been attributed to a new cyber espionage campaign targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea.

Cyber Attacks 129

Cyber Attacks Phishing 129

Security Boulevard

AUGUST 9, 2024

The post Cyber attacks 2024: The biggest attacks of the first half of 2024 appeared first on Click Armor. The post Cyber attacks 2024: The biggest attacks of the first half of 2024 appeared first on Security Boulevard.

Cyber Attacks 108

Cyber Attacks CISO Scams Phishing 108

Security Boulevard

AUGUST 21, 2024

Attacks today can be executed through a myriad of communication channels, including emails, social media and mobile applications. The post The Golden Age of Impersonation: The Dual Role of AI in Cyber Attacks & Cyber Defense appeared first on Security Boulevard.

Cyber Attacks 123

Cyber Attacks Mobile Media Social Engineering 123

Duo's Security Blog

JANUARY 14, 2025

In recent webinar Preventing Helpdesk Phishing with Duo and Traceless , Duo PMM Katherine Yang sat down with Gene Reich, Co-founder of Traceless to discuss why stronger identity verification is critical for MSPs and helpdesk teamsespecially with the increased accessibility of AI technologies driving identity fraud.

Phishing 111

Phishing Technology Scams Cybercrime 111

CyberSecurity Insiders

APRIL 4, 2023

billion phishing e-mails get delivered every day. The post Generative AI Changes Everything You Know About Email Cyber Attacks appeared first on Cybersecurity Insiders. Social engineering is a profitable business for hackers – according to estimates, around 3.4

Cyber Attacks 119

Cyber Attacks Social Engineering Scams Phishing 119

Security Boulevard

MARCH 16, 2025

In the world of cybersecurity awareness, phishing simulations have long been touted as the frontline defense against cyber threats. The Limitations of Phishing [] The post Why Only Phishing Simulations Are Not Enough appeared first on CybeReady.

Phishing 52

Phishing Cyber threats Cybersecurity Cyber Attacks 52

CyberSecurity Insiders

JANUARY 25, 2023

United States Cybersecurity and Infrastructure Security Agency (CISA) along with two other agencies; National Security Agency (NSA) and Multi-State Information Sharing and Analysis Center (MS-ISAC) have issued a warning to federal agencies against a phishing scam taking place through Remote Monitoring and Management (RMM) Software.

Scams 134

Scams Software Phishing Social Engineering 134

CyberSecurity Insiders

MAY 30, 2023

By Motti Elloul, VP Customer Success and Incident Response, Perception Point Email phishing scams are nothing new. But they are growing increasingly prevalent and sophisticated – over 3 billion phishing emails are sent every day, and the tactics used to disguise them are only growing more devious.

Phishing 133

Phishing Scams Cybersecurity Technology 133

The Hacker News

FEBRUARY 27, 2025

as part of phishing emails masquerading as the country's National Taxation Bureau. The campaign, detected last month by Fortinet FortiGuard Labs, marks a departure from previous attack chains that have leveraged malicious game-related applications. A new campaign is targeting companies in Taiwan with malware known as Winos 4.0

Cyber Attacks 127

Cyber Attacks Malware Phishing 127

Security Affairs

DECEMBER 29, 2023

Ukraine’s CERT (CERT-UA) warned of a new phishing campaign by the APT28 group to deploy previously undocumented malware strains. The Computer Emergency Response Team of Ukraine (CERT-UA) warned of a new cyber espionage campaign carried out by the Russia-linked group APT28 (aka “ Forest Blizzard ”, “ Fancybear ” or “ Strontium ”).

Phishing 142

Phishing Malware Computers and Electronics Internet 142

Security Affairs

SEPTEMBER 25, 2023

A phishing campaign targets Ukrainian military entities using drone manuals as lures to deliver the post-exploitation toolkit Merlin. Securonix researchers recently uncovered a phishing campaign using a Pilot-in-Command (PIC) Drone manual document as a lure to deliver a toolkit dubbed Merlin.

Phishing 136

Phishing Cyber Attacks Malware Internet 136

Security Affairs

JANUARY 20, 2025

Researchers linked the threat actor DoNot Teamto a new Android malware that was employed in highly targeted cyber attacks. In this case, the group is leveraging OneSignal to deliver phishing links through notifications. CYFIRMA researchers linked a recently discovered Android malware to the Indian APT group known as DoNot Team.

Malware 117

Malware Cyber Attacks Mobile Phishing 117

Schneier on Security

APRIL 7, 2020

From an agency memo : A new wave of cyber-attacks is targeting Federal Agency Personnel, required to telework from home, during the Novel Coronavirus (COVID-19) outbreak. Here are some examples of what's been observed in the past few days: Doubling of email phishing attempts. NASA is reporting an increase in cyberattacks.

Cybersecurity 273

Cybersecurity VPN Scams Phishing 273