Krebs on Security

AUGUST 21, 2020

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued a joint alert to warn about the growing threat from voice phishing or “ vishing ” attacks targeting companies. Limit the amount of personal information you post on social networking sites.

Social Engineering 363

Social Engineering VPN Authentication Engineering 363

Krebs on Security

NOVEMBER 21, 2020

In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage.” PST on Nov.

Cryptocurrency 364

Cryptocurrency Scams Social Engineering VPN 364

Security Affairs

JUNE 8, 2023

North Korea-linked APT Kimsuky has been linked to a social engineering campaign aimed at experts in North Korean affairs. SentinelLabs researchers uncovered a social engineering campaign by the North Korea-linked APT group Kimsuky that is targeting experts in North Korean affairs. shanumedia[.]com/pdf/ul/ji78fghJHKtgfLKJIO/s2.php?menu=ZGFu[.]vbQ==

Social Engineering 98

Social Engineering Engineering Malware Risk 98

Security Affairs

DECEMBER 10, 2024

This social engineering scheme has been amplified by targeted phishing, smishing, and vishing activities, with a noticeable increase around the winter holidays. In one documented call reported by Resecurity, the victim was contacted by an individual with an Indian accent and background noise typical of call centers.

Social Engineering 111

Social Engineering Phishing Banking DNS 111

Security Affairs

JULY 30, 2024

Researchers detected a sophisticated phishing campaign targeting Microsoft OneDrive users to trick them into executing a PowerShell script. Over the past few weeks, the Trellix Advanced Research Center observed a sophisticated phishing campaign targeting Microsoft OneDrive users. ” reads the report published by Trellix.

Phishing 143

Phishing DNS Social Engineering Engineering 143

SecureWorld News

FEBRUARY 15, 2024

The hackers rely heavily on social engineering tactics to distribute the malware. This includes sending phishing messages posing as government agencies or local banks to convince victims to click on links leading to fake apps infected with the malware. Experts warn that biometric authentication alone is not foolproof.

Social Engineering 103

Social Engineering Mobile Authentication Engineering 103

Krebs on Security

APRIL 6, 2022

“They would just keep jamming a few individuals to get [remote] access, read some onboarding documents, enroll a new 2FA [two-factor authentication method] and exfiltrate code or secrets, like a smash-and-grab,” the CXO said. “Someone was trying to phish employee credentials, and they were good at it,” Wired reported.

Social Engineering 293

Social Engineering Phishing Accountability Engineering 293

Heimadal Security

JULY 15, 2022

Researchers have uncovered a new phishing kit that, under the guise of security controls, injects malware into legitimate WordPress sites and uses a fake PayPal-branded social engineering scam to trick targets into handing over their most sensitive data. Researchers from Akamai said that the attackers […].

Phishing 111

Phishing Social Engineering Scams Engineering 111

SecureWorld News

JUNE 9, 2025

Additionally, a distributed workforce, ranging from remote maintenance technicians to cabin crews, multiplies entry points for social-engineering tactics like phishing. Aircraft themselves are nodes on data networks, constantly transmitting telemetry, engine performance metrics, and passenger connectivity data.

Cybersecurity 117

Cybersecurity Social Engineering Computers and Electronics Risk 117

eSecurity Planet

APRIL 8, 2025

Xanthorox vision can analyze images and screenshots to extract sensitive data or interpret visual content useful for cracking passwords or reading stolen documents. Xanthorox reasoner advanced mimics human reasoning, helping attackers craft more believable phishing messages or manipulate targets through social engineering.

Social Engineering 109

Social Engineering Phishing Engineering Cybercrime 109

Krebs on Security

JUNE 13, 2023

“Gaining access to sensitive and privileged documents, stealing and deleting documents as part of a ransomware attack or replacing real documents with malicious copies to further infect users in the organization.” ” There are at least three other vulnerabilities fixed this month that earned a collective 9.8

Social Engineering 272

Social Engineering System Administration Authentication Internet 272

Krebs on Security

AUGUST 19, 2021

. “According to this actor, he had originally intended to send his targets—all senior-level executives—phishing emails to compromise their accounts, but after that was unsuccessful, he pivoted to this ransomware pretext,” Hassold wrote.

Ransomware 363

Ransomware Social Engineering Cybercrime Scams 363

SecureWorld News

MAY 9, 2025

The development marks a significant escalation in COLDRIVER's cyber espionage activities, which have traditionally focused on credential phishing. The method, known as "ClickFix," leverages social engineering to bypass traditional email-based defenses. Cedric Leighton , CNN Military Analyst; U.S.

Malware 86

Malware Social Engineering Government Engineering 86

Malwarebytes

AUGUST 18, 2021

Phishing scammers love well known brand names, because people trust them, and their email designs are easy to rip off. DocuSign is a service that allows people to sign documents in the Cloud. DocuSign is a service that allows people to sign documents in the Cloud. Signing documents electronically saves a lot of paper and time.

Phishing 145

Phishing Password Management Passwords Accountability 145

Webroot

MARCH 3, 2025

Medical identity theft Medical identity theft happens when someone steals or uses your personal information like your name, Social Security number, or Medicare details, to get healthcare in your name. Social engineering attacks Social engineering attacks occur when someone uses a fake persona to gain your trust.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

Krebs on Security

JANUARY 30, 2024

2022 that an intrusion had exposed a “limited number” of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials. ” Group-IB dubbed the gang by a different name — 0ktapus — which was a nod to how the criminal group phished employees for credentials.

Social Engineering 359

Social Engineering Mobile Cybercrime Passwords 359

Krebs on Security

APRIL 9, 2024

Most of the flaws that Microsoft deems “more likely to be exploited” this month are marked as “important,” which usually involve bugs that require a bit more user interaction (social engineering) but which nevertheless can result in system security bypass, compromise, and the theft of critical assets.

DNS 317

DNS Social Engineering Malware Media 317

Security Boulevard

JULY 10, 2024

Google and Apple look to give users better protections against social engineering attacks like phishing, with Google giving high-risk users access to the APP service with a passkey and Apple educating users about the threats with a detailed support document in the wake of a recent smishing campaign.

Social Engineering 122

Social Engineering Education Phishing Engineering 122

Malwarebytes

JULY 19, 2022

A new phishing campaign targeting PayPal users aims to get extensive data from potential victims. The data it’s after includes government documents like passport, as well as selfie photos. PayPal phishing sites are a dime a dozen due to the number of people and companies using it as another form of payment method.

Phishing 114

Phishing Social Engineering Accountability Engineering 114

SecureList

DECEMBER 6, 2022

There are two main types of online fraud aimed at stealing user data and money: phishing and scams. Phishers primarily seek to extract confidential information from victims, such as credentials or bank card details, while scammers deploy social engineering to persuade targets to transfer money on their own accord.

Scams 132

Scams Phishing Social Engineering Banking 132

SC Magazine

FEBRUARY 23, 2021

Researchers reported Tuesday that they found two email phishing attacks targeting at least 10,000 mailboxes at FedEx and DHL Express that look to extract a user’s work email account. In the FedEx attack, the final phishing page spoofs an Office 365 portal packed with Microsoft branding. Brand impersonation.

Phishing 119

Phishing Social Engineering Technology Accountability 119

Duo's Security Blog

APRIL 20, 2023

Through the first two months of 2023 alone, the Australian Competition and Consumer Commission’s Scamwatch reported more than 19,000 phishing reports with estimated financial losses of more than $5.2 What is phishing? This is part of what makes phishing attacks so dangerous.

Phishing 106

Phishing Social Engineering Authentication Engineering 106

Malwarebytes

MAY 8, 2025

We discovered a new phishing kit targeting payroll and payment platforms that aims to not only steal victims’ credentials but also to commit wire fraud. Clicking on the ad sent employees and employers to a phishing website impersonating Deel. Phishing portal and 2FA The first phishing domain we saw was login-deel[.]app

Phishing 98

Phishing Authentication Engineering Banking 98

SecureWorld News

JUNE 10, 2025

Attackers are leveraging automation, social engineering, and AI to breach environments once considered robust. Developers now work in tandem with intelligent systems that suggest fixes, write documentation, and even predict deployment failures. AI-generated phishing emails are harder to detect.

Technology 90

Technology Artificial Intelligence Social Engineering Architecture 90

CyberSecurity Insiders

MAY 11, 2023

Intro In February 2022, Microsoft disabled VBA macros on documents due to their frequent use as a malware distribution method. OneNote documents have emerged as a new infection vector, which contain malicious code that executes when the document is interacted with. However, the best defense is always prevention.

Malware 98

Malware Social Engineering Engineering Education 98

SecureList

MARCH 25, 2025

Key findings Phishing Banks were the most popular lure in 2024, accounting for 42.58% of financial phishing attempts. Amazon Online Shopping was mimicked by 33.19% of all phishing and scam pages targeting online store users in 2024. Cryptocurrency phishing saw an 83.37% year-over-year increase in 2024, with 10.7

Phishing 77

Phishing Banking Scams Mobile 77

Security Affairs

SEPTEMBER 20, 2019

Cofense researchers spotted a phishing campaign that is targeting taxpayers in the United States to infect them with the Amadey malware. Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey. Pierluigi Paganini.

Phishing 108

Phishing Social Engineering Malware Advertising 108

SecureWorld News

DECEMBER 30, 2024

Be sure to secure server rooms, document archives, and other sensitive areas that could be involved in the incident. However, experts point out that attackers heavily rely on phishing email campaigns. Social engineering techniques enable them to bypass technical security measures effectively.

Data breaches 111

Data breaches Social Engineering Passwords Accountability 111

SC Magazine

JUNE 17, 2021

” The attacker then uses the phishing lure to get the victim to “ Click here to download the document.” Once the victim clicks on the link, they are redirected to the actual malicious phishing website where their credentials are stolen through a web page designed to mimic the Google Login portal.

Phishing 110

Phishing Social Engineering Engineering CISO 110

Security Affairs

SEPTEMBER 5, 2020

Experts spotted a phishing campaign that employees overlay screens and email ‘quarantine’ policies to steal Microsoft Outlook credentials from the victims. Researchers from Cofense discovered a phishing campaign that uses overlay screens and email ‘quarantine’ policies to steal Microsoft Outlook credentials from the targets.

Social Engineering 145

Social Engineering Phishing Engineering Advertising 145

Security Affairs

JULY 9, 2021

Threat actors have devised a new trick to disable macro security warning that leverage non-malicious docs in phishing attacks. Most of the phishing attacks leverage weaponized Microsoft Office documents and social engineering techniques to trick recipients into enabling the macros. Zeus OpenSSL).

Phishing 98

Phishing Social Engineering Banking Engineering 98

eSecurity Planet

OCTOBER 3, 2022

PuTTY, KiTTY, TightVNC, Sumatra PDF Reader, and the muPDF/Subliminal Recording software installer have been backdoored to perform a wide range of social engineering campaigns that started in April 2022. They used LinkedIn to connect with the victims and gain their trust. Also read: How Hackers Evade Detection.

Software 128

Software Social Engineering Engineering Phishing 128

Jane Frankland

MAY 16, 2025

Fraudsters use AI, social engineering, and emotional manipulation to steal not just money, but also trust, time, and peace of mind. MFA Bypass Methods: SIM swaps, malware, or phishing sites that trick you into revealing or approving access. Scams today arent just dodgy emails or shady phone calls.

Scams 130

Scams Password Management Passwords Banking 130

SecureWorld News

AUGUST 9, 2024

In today's digital age, phishing has evolved into a sophisticated threat capable of deceiving even the most technically savvy individuals. No longer confined to suspicious emails, phishing now encompasses voice-based attacks (vishing), text-based scams (smishing) automated with phishing kits, and deepfake technologies.

Technology 107

Technology Phishing Risk Scams 107

Security Affairs

APRIL 21, 2023

Phishing attacks are a major threat to organizations, they remain a perennial choice of cybercriminals when it comes to hacking their victims.

Phishing 98

Phishing Social Engineering Security Awareness Passwords 98

SecureWorld News

JUNE 4, 2025

While the company emphasized that no financial data or passwords were exposed, the incident raises concerns about the potential for highly targeted phishing and social engineering , particularly given the brand's clientele of high-net-worth individuals (HNWIs). The reputational damage could be immense."

Retail 65

Retail Banking Financial Services Social Engineering 65

Security Affairs

APRIL 7, 2021

Crooks increasingly often use legitimate services such as Google Forms and Telegram to obtain user data stolen on phishing websites. Last year, Group-IB identified phishing kits targeting over 260 unique brands. Last year, Group-IB identified phishing kits targeting over 260 unique brands.

Phishing 103

Phishing Cybercrime Social Engineering Accountability 103