article thumbnail

Phishers migrate to Telegram

Security Affairs

Newbies get a taste of what phishing tools can do, pull off their first scam and wish for more, which is when they will be offered paid content. The creators of phishing bots and kits can get access to data that is gathered with their tools. “Malicious actors offer “premium” phishing and scam pages for sale.

article thumbnail

The Telegram phishing market

SecureList

Once a URL is entered, the bot will generate several scam links targeting users of the service. Archive with phishing kits posted in a Telegram scam channel Contents of a free phishing kit archive Phishers also share stolen personal data with their subscribers, tagging it with information on whether it was verified or not.

Phishing 129
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Spam and phishing in 2022

SecureList

Thus, during the World Cup a brand-new scam appeared: it offered users to win a newly released iPhone 14 for predicting match outcomes. The cybercrooks might also use the data to contact their victims later, staging a more convincing swindle. This increased usage meant the users’ risk of losing personal data was now higher, too.

Phishing 102
article thumbnail

Doxing in the corporate sector

SecureList

During these conversations, cybercriminals employed social engineering techniques to gain access not only to the internal network of the company, but also to tools that enabled them to manage Twitter user accounts. Examples of scam messages on Twitter. More details about this incident can be found in the Twitter company blog.

article thumbnail

Group-IB: $49.4 million of damage caused to Russia’s financial sector from cyber attacks

Security Affairs

GIB Threat Intelligence cyber threats data collection system has been named one of the best in class by Gartner, Forrester, and IDC. There has been a significant rise in the number of crimes committed using web phishing and fake websites of banks, payment systems, telecoms operators, online stores and famous brands.

article thumbnail

Happy 13th Birthday, KrebsOnSecurity!

Krebs on Security

Internal Revenue Service website for months: Anyone seeking to create an account to view their tax records online would soon be required to provide biometric data to a private company in Virginia — ID.me. com, which was fed by pig butchering scams. The now-defunct and always phony cryptocurrency trading platform xtb-market[.]com,

article thumbnail

Good game, well played: an overview of gaming-related cyberthreats in 2022

SecureList

Additionally, we looked at the phishing activity around gaming, specifically that related to cybersports tournaments, bookmakers, gaming marketplaces, and gaming platforms, and found numerous examples of scams that target gamers and esports fans. Key findings. Risky money: how to lose instead of gaining.

Mobile 111