Cybercrime, Risk and Social Engineering

EDR-as-a-Service makes the headlines in the cybercrime landscape

Security Affairs

APRIL 7, 2025

This approach reflects the as-a-service logic already prevalent in other areas of the cybercrime sector, significantly reducing the level of technical knowledge needed by those wishing to access this confidential data.

Cybercrime

Cybercrime Social Engineering Accountability Government

Hackers Exploit Zoom's Remote Control Feature in Cryptocurrency Heists

SecureWorld News

APRIL 22, 2025

A sophisticated cybercrime campaign, dubbed Elusive Comet , has been uncovered, in which North Korean threat actors are exploiting Zoom's remote control feature to infiltrate the systems of cryptocurrency professionals.

Cryptocurrency

Cryptocurrency Social Engineering Cybercrime Engineering

The FBI warns that Scattered Spider is now targeting the airline sector

Security Affairs

JUNE 28, 2025

The FBI reports that the cybercrime group Scattered Spider is now targeting the airline sector. The cybercriminals are using social engineering techniques to gain access to target organizations by impersonating employees or contractors. The FBI warns that Scattered Spider is now targeting the airline sector.

Social Engineering

Social Engineering Cybercrime Engineering Authentication

Qantas confirms customer data breach amid Scattered Spider attacks

Security Affairs

JULY 2, 2025

“We are working closely with the Federal Government’s National Cyber Security Coordinator, the Australian Cyber Security Centre and independent specialised cyber security experts.” At the end of June, the FBI reports that the cybercrime group Scattered Spider is now targeting the airline sector. reads the alert published by the FBI on X.

Data breaches

Data breaches Social Engineering Engineering Cybercrime

Understanding the Deepfake Threat

SecureWorld News

FEBRUARY 13, 2025

Evolution of social engineering Social engineering exploits human psychology to manipulate individuals into revealing sensitive information or taking harmful actions. Key risks posed by deepfakes Deepfake attacks can be broadly classified into three categories.

Social Engineering

Social Engineering Authentication Identity Theft Engineering

‘Treacherous Territory’: Cyber Experts Warn of Unprecedented Threats

eSecurity Planet

JULY 14, 2025

Airlines become top targets Airlines are now a prime focus for cybercrime groups. Scattered Spider is known for using clever social engineering to trick IT help desks into bypassing security protocols, especially multi-factor authentication (MFA).

Insurance

Insurance Identity Theft Authentication Artificial Intelligence

Crazy Evil gang runs over 10 highly specialized social media scams

Security Affairs

FEBRUARY 3, 2025

” Crazy Evil is referred as a traffer team, which is a group of social engineering specialists tasked with redirecting legitimate traffic to malicious landing pages. The cybercrime gang focused on targeting the Web3 and decentralized finance industry. These factors make it a persistent cyber threat.

Scams

Scams Media Cryptocurrency Cybercrime

March Madness Meets Cyber Mayhem: How Cybercriminals Are Playing Offense this Season

SecureWorld News

MARCH 20, 2025

Phishing plays straight out of the cybercrime playbook "March Madness brings heightened cybersecurity risks this year, especially with the expansion of sports gambling beyond traditional office pools creating new attack vectors for credential harvesting and financial fraud," warns J.

Scams

Scams Social Engineering Phishing Mobile

Romantic Lawsuit for Two? Don't Let Cybercriminals Scam You this Valentine's Day

SecureWorld News

FEBRUARY 14, 2025

Last year saw a 110% rise in cybercrime in the lead up to Valentine's Day. And 2025 will be no different, as increasingly sophisticated online hackers seek to take advantage of Valentine's themed email traffic, social media advertisements, or marketing campaigns, and exploit heightened emotions and a desire to connect.

Scams

Scams Cybercrime Phishing Social Engineering

MUT-1244 Campaign Steals Hundreds of Thousands of WordPress Credentials and More

SecureWorld News

DECEMBER 17, 2024

Researchers at Datadog Security Labs have uncovered a year-long, large-scale cybercrime campaign by a threat actor tracked as MUT-1244. This operation, which blends social engineering and technical exploitation, has resulted in the theft of more than 390,000 WordPress credentials.

Phishing

Phishing Threat Detection Social Engineering Cybercrime

National Consumer Protection Week: Keeping your personal data safe in a digitally connected world

Webroot

MARCH 3, 2025

March is a time for leprechauns and four-leaf clovers, and as luck would have it, its also a time to learn how to protect your private data from cybercrime. The growing risks to your data During the third quarter of 2024, data breaches exposed more than 422 million records worldwide.

Consumer Protection

Consumer Protection Identity Theft Scams Social Engineering

Scattered Spider Strikes Again: U.K. Attacks Spark U.S. Retailer Alarm

SecureWorld News

MAY 16, 2025

Scattered Spider is a financially motivated threat actor group known for its social engineering prowess, SIM-swapping attacks, and living-off-the-land (LOTL) techniques. The group is well known to employ social engineering tactics to gain access, so hardening your help desk is an immediate first step in defense," Staynings continued.

Retail

Retail Social Engineering Engineering Telecommunications

Supply Chain Vulnerability Strikes Again in Allianz Life Data Breach

SecureWorld News

JULY 29, 2025

The root cause of the Allianz Life breach was a social engineering attack launched on one of its cloud vendors on July 16th, according to the company's filing with the Maine Attorney General's office. It's part of a disturbing trend of social engineering attacks specifically targeting the insurance sector and other industries.

Data breaches

Data breaches Social Engineering Identity Theft Insurance

Cybercriminals Impersonate Dubai Police to Defraud Consumers in the UAE – Smishing Triad in Action

Security Affairs

DECEMBER 10, 2024

This social engineering scheme has been amplified by targeted phishing, smishing, and vishing activities, with a noticeable increase around the winter holidays. Cybercriminals quickly took advantage of this festive period when citizens were relaxed, and less vigilant at home, resulting in financial losses.

Phishing

Phishing Social Engineering Banking DNS

Scattered Spider Targets U.S. Critical Infrastructure Through VMware Attacks

SecureWorld News

JULY 28, 2025

The threat actors are bypassing traditional endpoint protections by directly attacking the hypervisor layer, utilizing social engineering and identity compromise to hijack administrative access and deploy ransomware from within. He emphasized that virtualization—which is meant to simplify operations—also centralizes risk.

Social Engineering

Social Engineering Backups Phishing Engineering

Android malware turns phones into malicious tap-to-pay machines

Malwarebytes

APRIL 24, 2025

Then you’re like millions of other users now at risk from a new form of cybercrime – malware that can read your credit or debit card and hand its data over to an attacker. They can then focus on finding and targeting victims with social engineering attacks, which Cleafy says they’ve been doing in Italy.

Malware

Malware Banking Software Social Engineering

Whole Foods Supplier United Natural Foods Hit in Cyber Attack

SecureWorld News

JUNE 10, 2025

This breach not only raises concerns about UNFI's internal resilience but also underscores broader risks to food supply chains and retail operations. For CISOs, that translates into more direct engagement with finance, risk, and board leadership.

Cyber Attacks

Cyber Attacks Retail Marketing Social Engineering

Honeywell Report OT Under Siege

SecureWorld News

JUNE 6, 2025

USB and removable media: The forgotten threat vector Honeywell continues to track high-risk threats delivered via USB devices.

Media

Media Social Engineering Malware Engineering

New AI “agents” could hold people for ransom in 2025

Malwarebytes

FEBRUARY 4, 2025

The same is true for all text-based social engineering tricks, as AI chat tools can write alluring direct messages for romance scams and craft urgent-sounding texts that can fool people into clicking on links that carry malware. We dont just report on threatswe remove them Cybersecurity risks should never spread beyond a headline.

Artificial Intelligence

Artificial Intelligence Small Business Malware Technology

How Security Teams Collect the Data They Need for Threat Intelligence

SecureWorld News

APRIL 14, 2025

The evolution of cybercrime is shifting into hyperdrive. It helps prioritize risks, organize protection efforts, and allocate resources more flexibly to address the most pressing threats first. Yet, it's potent enough to give white hats the upper hand in this race.

Media

Media Social Engineering Malware Financial Services

Security Affairs newsletter Round 510 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

FEBRUARY 9, 2025

What are the risks? US Justice Department says cybercrime forum allegedly affected 17 million Americans Cybercrime is increasingly complex.

Spyware

Spyware Cybercrime Scams Social Engineering

Qantas data breach impacted 5.7 million individuals

Security Affairs

JULY 10, 2025

At the end of June, the FBI reports that the cybercrime group Scattered Spider is now targeting the airline sector. The cybercriminals are using social engineering techniques to gain access to target organizations by impersonating employees or contractors. reads the alert published by the FBI on X.

Data breaches

Data breaches Social Engineering Engineering Accountability

Luxury, Loyalty and Lateral Movement: Retail and Banking Attacks Surge

SecureWorld News

JUNE 4, 2025

While the company emphasized that no financial data or passwords were exposed, the incident raises concerns about the potential for highly targeted phishing and social engineering , particularly given the brand's clientele of high-net-worth individuals (HNWIs). The reputational damage could be immense."

Retail

Retail Banking Financial Services Social Engineering

Jailbroken AIs are helping cybercriminals to hone their craft

Malwarebytes

JUNE 26, 2025

These jailbroken AIs could generate unrestricted content, including malicious code , phishing emails , and social engineering scripts. We don’t just report on threats—we remove them Cybersecurity risks should never spread beyond a headline. Malwarebytes products will still detect these payloads and keep you safe.

Social Engineering

Social Engineering Malware Phishing Engineering

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JUNE 29, 2025

House banned WhatsApp on government devices due to security concerns Russia-linked APT28 use Signal chats to target Ukraine official with malware China-linked APT Salt Typhoon targets Canadian Telecom companies U.S.

Data breaches

Data breaches Ransomware Social Engineering Telecommunications

Road Tolls Scams Rise on FBI's Radar; Public Warned Against Smishing

SecureWorld News

MARCH 18, 2025

The rise of these sophisticated road toll scams is catching many people off guard, highlighting the evolving nature of cybercrime. Regular simulations and updates on emerging threats are essential to help employees recognize and mitigate these risks effectively."

Scams

Scams Mobile Phishing Education

The Implications of Microsoft's New European Security Program

SecureWorld News

JULY 21, 2025

The imperative for enhanced cybersecurity in Europe The digital environment in Europe is increasingly fraught with persistent threat activity, characterized by sophisticated nation-state actors from Russia, China, Iran, and North Korea, as well as financially motivated cybercrime syndicates using tactics like Ransomware-as-a-Service.

Cybersecurity

Cybersecurity Technology Cybercrime Cyber threats

Security Affairs newsletter Round 506 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JANUARY 12, 2025

CISA adds Oracle WebLogic Server and Mitel MiCollab flaws to its Known Exploited Vulnerabilities catalog Threat actors breached the Argentinas airport security police (PSA) payroll Moxa router flaws pose serious risks to industrial environmets US adds Tencent to the list of companies supporting Chinese military Eagerbee backdoor targets govt entities (..)

Data breaches

Data breaches Phishing Social Engineering Engineering

AI Dilemma: Emerging Tech as Cyber Risk Escalates

Trend Micro

JULY 2, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team.

Cyber Risk

Cyber Risk Risk Cyber threats Artificial Intelligence

The danger of data breaches — what you really need to know

Webroot

APRIL 22, 2025

Chances are youve received at least one of these letters, which means you have been put at risk for identity theft and major financial losses. Hijacking online accounts : If your login credentials (usernames and passwords) are leaked, all your online accounts are put at risk. In 2024, more than 1.3

Data breaches

Data breaches Identity Theft Passwords eCommerce

Android threats rise sharply, with mobile malware jumping by 151% since start of year

Malwarebytes

JUNE 30, 2025

The February spike shows this isn’t random, it’s methodical business development in the cybercrime space. We don’t just report on phone security—we provide it Cybersecurity risks should never spread beyond a headline. Smishing (SMS phishing) has quickly become one of the most effective tools in the attacker’s playbook.

Mobile

Mobile Malware Spyware Scams

Secure Communications: Relevant or a Nice to Have?

Jane Frankland

FEBRUARY 7, 2025

But as a CISO or cyber risk owner, it’s not just about locking down sensitive informationits about doing it without slowing down your people. It encompasses everything from ensuring the confidentiality and integrity of information to reducing risks, maintaining compliance, and building trust with customers.

CISO

CISO Cyber Risk Risk Encryption

When Good Tools Go Bad: Dual-Use in Cybersecurity

Security Boulevard

APRIL 8, 2025

Social Engineering Tactics: These tactics exploit human psychology to manipulate individuals. In our exclusive white paper, we delve deep into how AI is reshaping cybercrime, the methods attackers use, and actionable strategies to keep your organization protected.

Cybersecurity

Cybersecurity Penetration Testing DNS Encryption

Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

OCTOBER 27, 2024

Chinese cyber spies targeted phones used by Trump and Vance Irish Data Protection Commission fined LinkedIn €310M for GDPR infringement Change Healthcare data breach impacted over 100 million people OnePoint Patient Care data breach impacted 795916 individuals From Risk Assessment to Action: Improving Your DLP Response U.S.

Data breaches

Data breaches Healthcare Cybercrime Hacking

Top Cyber Attacker Techniques, August–October 2024

Digital Shadows

NOVEMBER 26, 2024

The proliferation of cybercrime guides on forums and a 7% rise in insider threat content, driven by significant financial incentives, highlight the growing complexity of cybersecurity challenges. Ransomware attacks, in particular, pose a significant risk, though some sectors and regions are more vulnerable than others.

Cyber Attacks

Cyber Attacks Phishing Ransomware Cyber Insurance

To empower, not intimidate: a new model for cybersecurity awareness

BH Consulting

JUNE 18, 2025

Cybercrime can have real-world impact on individuals,” Brian said. “We Brian referred to a survey of 1,200 Britons which found that 62 per cent felt traumatised after experiencing cybercrime. Think of someone in your organisation who fell victim to social engineering that led to a breach,” Brian urged. “Be

Cybersecurity

Cybersecurity Phishing Scams Education

Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds

Malwarebytes

MAY 8, 2025

After entering their credentials, victims are social engineered by the crooks to type a security code that was sent to their email address. We don’t just report on threats – we help safeguard your entire digital identity Cybersecurity risks should never spread beyond a headline. com Phishing domains login-deel[.]app

Phishing

Phishing Authentication Engineering Banking

16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself

Zero Day

JUNE 22, 2025

Here's how to check if your accounts are at risk and what to do next. And while financial costs may be a factor, individual victims may face targeted phishing campaigns, social engineering schemes, identity theft, and damage to credit. Social engineering : A scammer may impersonate you to access your account.

Passwords

Passwords Data breaches Password Management Identity Theft

Key Cybersecurity Trends for 2025. My Predictions

Jane Frankland

JANUARY 12, 2025

In this blog, I’m exploring these changes, grouped under key categories that I’ve used in previous years, to help business leaders and cyber risk owners better prepare for the evolving landscape. Critical infrastructure face heightened risk from targeted disruptions, as do small businesses who are the backbone of the economy.

Cybersecurity

Cybersecurity CISO Insurance IoT

2025 Cybersecurity Predictions: Not Getting Easier; But There is Hope

SecureWorld News

DECEMBER 27, 2024

Critical infrastructure is at risk, moreso thanks to AI. Kip Boyle, vCISO, Cyber Risk Opportunities LLC: The Challenge of Cultivating Buy-in from Leadership and Employees "Cybersecurity professionals will continue to face a critical challenge: cultivating genuine buy-in from both senior leaders and employees.

Cybersecurity

Cybersecurity CISO Risk Government

FBI Warning: AI-Driven Impersonation Attacks Target U.S. Officials

SecureWorld News

MAY 29, 2025

When Defense Minister Crosetto found out about this vishing attack, he informed Italian law enforcement and posted about the incident on social media." The FBI's IC3 released its 2024 Internet Crime Report earlier this month, announcing a record-breaking year in cybercrime. The report highlights a staggering $16.6

Scams

Scams Social Engineering Media Phishing

Heard about the 16 billion passwords leak? Here are the facts and how to protect yourself

Zero Day

JUNE 20, 2025

Here's how to check if your accounts are at risk and what to do next. And while financial costs may be a factor, individual victims may face targeted phishing campaigns, social engineering schemes, identity theft, and damage to credit. Social engineering : A scammer may impersonate you to access your account.

Passwords

Passwords Data breaches Password Management Identity Theft

US Pig Butchering Victims ‘Will’ Get Refunds — Feds Seize $225M Cryptocurrency

Security Boulevard

JUNE 20, 2025

DoJ, FBI, USSS yoinked USDT: Pretty girls plus investment fraud equals forfeiture recovery (eventually). The post US Pig Butchering Victims ‘Will’ Get Refunds — Feds Seize $225M Cryptocurrency appeared first on Security Boulevard.

Cryptocurrency

Cryptocurrency Social Engineering Banking Scams

Bybit Hack: FBI Attributes to North Korea, Urges Crypto Sector to Act

SecureWorld News

FEBRUARY 27, 2025

This statement underscores the increasing reliance on the private sector to assist in mitigating cybercrime in the digital asset space. Their strategy often involves spear-phishing attacks, social engineering, and exploiting vulnerabilities in smart contracts and multi-signature wallets.

Hacking

Hacking Cryptocurrency Cybercrime Social Engineering

EDR-as-a-Service makes the headlines in the cybercrime landscape

Hackers Exploit Zoom's Remote Control Feature in Cryptocurrency Heists

Trending Sources

The FBI warns that Scattered Spider is now targeting the airline sector

Qantas confirms customer data breach amid Scattered Spider attacks

Understanding the Deepfake Threat

‘Treacherous Territory’: Cyber Experts Warn of Unprecedented Threats

Crazy Evil gang runs over 10 highly specialized social media scams

March Madness Meets Cyber Mayhem: How Cybercriminals Are Playing Offense this Season

Romantic Lawsuit for Two? Don't Let Cybercriminals Scam You this Valentine's Day

MUT-1244 Campaign Steals Hundreds of Thousands of WordPress Credentials and More

National Consumer Protection Week: Keeping your personal data safe in a digitally connected world

Scattered Spider Strikes Again: U.K. Attacks Spark U.S. Retailer Alarm

Supply Chain Vulnerability Strikes Again in Allianz Life Data Breach

Cybercriminals Impersonate Dubai Police to Defraud Consumers in the UAE – Smishing Triad in Action

Scattered Spider Targets U.S. Critical Infrastructure Through VMware Attacks

Android malware turns phones into malicious tap-to-pay machines

Whole Foods Supplier United Natural Foods Hit in Cyber Attack

Honeywell Report OT Under Siege

New AI “agents” could hold people for ransom in 2025

How Security Teams Collect the Data They Need for Threat Intelligence

Security Affairs newsletter Round 510 by Pierluigi Paganini – INTERNATIONAL EDITION

Qantas data breach impacted 5.7 million individuals

Luxury, Loyalty and Lateral Movement: Retail and Banking Attacks Surge

Jailbroken AIs are helping cybercriminals to hone their craft

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

Road Tolls Scams Rise on FBI's Radar; Public Warned Against Smishing

The Implications of Microsoft's New European Security Program

Security Affairs newsletter Round 506 by Pierluigi Paganini – INTERNATIONAL EDITION

AI Dilemma: Emerging Tech as Cyber Risk Escalates

The danger of data breaches — what you really need to know

Android threats rise sharply, with mobile malware jumping by 151% since start of year

Secure Communications: Relevant or a Nice to Have?

When Good Tools Go Bad: Dual-Use in Cybersecurity

Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

Top Cyber Attacker Techniques, August–October 2024

To empower, not intimidate: a new model for cybersecurity awareness

Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds

16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself

Key Cybersecurity Trends for 2025. My Predictions

2025 Cybersecurity Predictions: Not Getting Easier; But There is Hope

FBI Warning: AI-Driven Impersonation Attacks Target U.S. Officials

Heard about the 16 billion passwords leak? Here are the facts and how to protect yourself

US Pig Butchering Victims ‘Will’ Get Refunds — Feds Seize $225M Cryptocurrency

Bybit Hack: FBI Attributes to North Korea, Urges Crypto Sector to Act

Stay Connected