SecureWorld News

MAY 9, 2025

Google's Threat Intelligence Group (GTIG) has identified a new malware strain, dubbed "LOSTKEYS," attributed to the Russian state-sponsored hacking group COLDRIVER. The method, known as "ClickFix," leverages social engineering to bypass traditional email-based defenses. Cedric Leighton , CNN Military Analyst; U.S.

Malware 83

Malware Social Engineering Government Engineering 83

The Last Watchdog

DECEMBER 3, 2018

Related: Uber hack shows DevOps risk. The Starwood hack appears to come in second in scale only to the 2013 Yahoo breac h, which affected as many as 3 billion accounts, while a subsequent Yahoo breach also hit 500 million accounts. In 2014, a JP Morgan Chase hack exposed 76 million households.

Hacking 157

Hacking eCommerce Authentication Social Engineering 157

SecureWorld News

MAY 16, 2025

Scattered Spider is a financially motivated threat actor group known for its social engineering prowess, SIM-swapping attacks, and living-off-the-land (LOTL) techniques. The group is well known to employ social engineering tactics to gain access, so hardening your help desk is an immediate first step in defense," Staynings continued.

Retail 72

Retail Social Engineering Engineering Telecommunications 72

Krebs on Security

AUGUST 26, 2020

For several years beginning around 2010, a lone teenager in Vietnam named Hieu Minh Ngo ran one of the Internet’s most profitable and popular services for selling “ fullz ,” stolen identity records that included a consumer’s name, date of birth, Social Security number and email and physical address. BEGINNINGS.

Identity Theft 355

Identity Theft Computers and Electronics Hacking Accountability 355

Security Affairs

JUNE 23, 2025

UK’s Cyber Monitoring Centre (CMC) labels Marks & Spencer and Co-op cyberattacks a Category 2 event, estimating financial impact at £270M–£440M. The Cyber Monitoring Centre (CMC) has labeled the recent cyberattacks on Marks & Spencer and Co-op as a Category 2 systemic event, estimating losses between £270M and £440M.

Retail 65

Retail Social Engineering Data breaches Cybercrime 65

CyberSecurity Insiders

DECEMBER 14, 2021

SANS Holiday Hack Challenge 2021 is back to help Santa Claus defeat cyber villains like Jack Frost to save the holiday season from a digital disaster. SANS Holiday Hack Challenge 2020 witnessed the participation of over 19,000 players and this year it’s expected to double up, as the event is being held online.

Hacking 90

Hacking Penetration Testing Social Engineering Mobile 90

eSecurity Planet

JUNE 30, 2021

A hacker who recently offered 700 million LinkedIn records for sale alarmed LinkedIn users and security specialists, but the company insists the data is linked to previously reported scraped data and wasn’t hacked. ” Based on the events of the past few months, it appears those defenses are insufficient. “Bottom line?

Hacking 115

Hacking Social Engineering Identity Theft Data breaches 115

Security Affairs

FEBRUARY 8, 2024

Generative AI Impact : Generative AI will have a big role in cyber security, especially in areas like email protection and fighting social engineering attacks. Recent Security Events Recent cyber security events have highlighted the persistent and evolving nature of online threats.

Social Engineering 142

Social Engineering Cyber Attacks Cyber Insurance IoT 142

Security Affairs

MARCH 29, 2025

The malware also supports advanced keylogger capabilities by capturing all Accessibility events and screen elements. Notifications & Social Engineering: Posts fake push notifications to trick users. ThreatFabric states that the malware primarily targets users in Spain and Turkey, with global expansion expected.

Banking 69

Banking Mobile Identity Theft Malware 69

eSecurity Planet

APRIL 21, 2025

A Russian state-linked hacking group is ramping up its cyberattacks against diplomatic targets across Europe, using a new stealthy malware tool known as GrapeLoader to deliver malicious payloads through cleverly disguised phishing emails. This time, their targets are embassies and foreign ministries, mostly in Europe.

Scams 57

Scams Phishing Social Engineering Malware 57

Malwarebytes

MAY 3, 2022

In an unexpected turn of events, research has surfaced about a Chinese APT (advanced persistent threat) group targeting the Russian military in recent cyberattacks.

Hacking 136

Hacking Software Social Engineering Engineering 136

Security Affairs

OCTOBER 23, 2023

Teodoro ordered “to refrain from using AI photo generator applications and practice vigilance in sharing information online” At this time, it remains unclear whether the order was issued in response to a specific event or to address potential attacks aimed at exploiting the data collected by these applications.

Identity Theft 137

Identity Theft Social Engineering Data collection Risk 137

Security Boulevard

MAY 30, 2024

The post Ticketmaster Hack Ticks Off 560M Customers in 1.3TB Breach appeared first on Security Boulevard. What we know so far: A Ticketmaster AWS instance was penetrated by unknown perpetrators; “ShinyHunters” is selling stolen data on their behalf. Don’t forget to add the hidden 5% fee to the ransom.

Hacking 131

Hacking Social Engineering Data privacy Engineering 131

Security Affairs

OCTOBER 19, 2023

This is the 11th edition of the annual report and analyzes events that took place between July 2022 and July 2023. During the reporting period, key findings include: DDoS and ransomware rank the highest among the prime threats, with social engineering, data related threats, information manipulation, supply chain, and malware following.

Social Engineering 135

Social Engineering Artificial Intelligence Engineering Ransomware 135

Security Through Education

MARCH 3, 2021

However, they often overlook the role of social engineering in cyber security. Malicious actors use emotions in human hacking with a high success rate. Hackers use emotions as a social engineering tool, to persuade their victims to take an action they normally would not. Knowledge is power.

Social Engineering 64

Social Engineering Hacking Engineering Banking 64

Security Through Education

JANUARY 21, 2021

On February 20 th , we kicked off our very first Human Hacking Conference (HHC). The HHC was created by Chris Hadnagy, the CEO of Social-Engineer, LLC. After running several social engineering villages at other conferences, Chris was inspired to create his own conference. Year Alpha was a massive success.

Hacking 75

Hacking Social Engineering Engineering Education 75

Security Affairs

SEPTEMBER 9, 2024

The company notified federal law enforcement regarding the event and launched an investigation into the incident with the help of a third-party specialist. Card verification numbers (CVV) were not exposed, however, threat actors can obtain them from cardholders through social engineering attacks.

Data breaches 142

Data breaches Identity Theft Computers and Electronics Social Engineering 142

Security Affairs

NOVEMBER 29, 2023

The threat actor was able to use these session tokens to hijack the legitimate Okta sessions of 5 customers, 3 of whom have shared their own response to this event.” The three customers who shared their own responses to the event are Cloudflare, 1Password , and BeyondTrust. ” continues the update.

Social Engineering 132

Social Engineering Authentication Accountability Engineering 132

Security Through Education

APRIL 1, 2024

I write this to highlight a key breakthrough I’ve encountered so far at Social-Engineer, LLC (SECOM), that until now, I hadn’t truly grasped at a fundamental level. Looking back on this timeline of events, I realize I began at the most opportune time. Written by: Carter Zupancich Human Risk Analyst at Social-Engineer, LLC

Social Engineering 52

Social Engineering Engineering Education Risk 52

Security Affairs

NOVEMBER 3, 2023

The threat actor was able to use these session tokens to hijack the legitimate Okta sessions of 5 customers, 3 of whom have shared their own response to this event.” ” The three customers who shared their own responses to the event are Cloudflare, 1Password , and BeyondTrust.

Data breaches 143

Data breaches Accountability Social Engineering Authentication 143

Daniel Miessler

SEPTEMBER 27, 2020

Think about how irresponsible you’d feel if that thing happened, and perhaps stress less about it if it would be considered a freak event. At that point you start clicking and browsing and doing whatever you do, and all those events could be logged or tracked by that entity or anyone who has access to their systems.

VPN 326

VPN Risk Hacking Encryption 326

SecureList

AUGUST 17, 2022

Of course, these actual events have been and will be spun up into misinformation content, which is unfortunate, but the legitimate discussion must be held. Amongst all the village dazzle , DEF CON included a social engineering village, and talks included policy discussion, panels on getting a start in social engineering, and more.

Social Engineering 118

Social Engineering Engineering Accountability Ransomware 118

Security Affairs

FEBRUARY 14, 2024

Microsoft and OpenAI warn that nation-state actors are using ChatGPT to automate some phases of their attack chains, including target reconnaissance and social engineering attacks. ” reads the report published by Microsoft.

Social Engineering 134

Social Engineering Artificial Intelligence Phishing Engineering 134

eSecurity Planet

APRIL 23, 2021

Since 2017, host Jack Rhysider has investigated some of the most noteworthy stories related to the darkside of the internet, specifically hacking, data breaches, and cybercrime. It requires some baseline industry knowledge, but it’s a great way to stay on top of InfoSec current events. Hacking Humans. Malicious Life.

Cybersecurity 144

Cybersecurity InfoSec Cybercrime Hacking 144

eSecurity Planet

MARCH 24, 2022

On March 22, Microsoft confirmed a substantial breach by the LAPSUS$ hacking group. In a blog post detailing its efforts to track and contain the breach, Microsoft described LAPSUS$ as a “large scale social engineering and extortion campaign.” Who is the LAPSUS$ Hacking Group? Trade Cyberthreats.

Social Engineering 109

Social Engineering Data breaches Engineering Hacking 109

Security Affairs

FEBRUARY 3, 2020

Cybercriminals are planting so-called “sleepers” in cleaning companies so that they can physically access IT infrastructure and hack them. The alert was launched by a senior p olice officer, cyber criminals are p lanting so-called “sleepers” in cleaning companies so that they can gau physical access IT infrastructure and hack them.

Social Engineering 100

Social Engineering Advertising CISO Hacking 100

Security Affairs

JANUARY 26, 2021

“The actors have been observed targeting specific security researchers by a novel social engineering method.” Experts also reported that threat actors used social engineering attacks to target the researchers. SecurityAffairs – hacking, North Korea). ” continues the post. Pierluigi Paganini.

Media 130

Media Social Engineering Accountability Engineering 130

Security Boulevard

MAY 16, 2025

With the loss of customer name and contact data, there may be some social engineering attacks, but Coinbase has already said they will make customer whole if that happens. Craft your defense and response capabilities to be able to respond like Coinbase, in the unfortunate event of a breach. The hunters now become the hunted.

Hacking 66

Hacking CSO Social Engineering CISO 66

SecureList

JANUARY 18, 2023

The threat landscape is constantly updated through new malware and spyware, advanced phishing methods, and new social engineering techniques. In addition, the likelihood of the data being used for phishing and social engineering increases. . Enjoying the fun part: cybercriminals to post fake hack reports more often.

Media 140

Media Social Engineering Ransomware Hacking 140

Security Affairs

NOVEMBER 4, 2022

This is the 10 th edition of the annual report and analyzes events that took place between July 2021 and July 2022. Social engineering: Phishing remains a popular technique but we see new forms of phishing arising such as spear-phishing, whaling, smishing and vishing. SecurityAffairs – hacking, ENISA Threat Landscape 2022).

Cyber threats 142

Cyber threats Phishing Social Engineering Ransomware 142

Security Affairs

JUNE 3, 2023

Some targeted entities may discount the threat posed by these social engineering campaigns, either because they do not perceive their research and communications as sensitive in nature, or because they are not aware of how these efforts fuel the regime’s broader cyber espionage efforts. . ” continues the advisory.

Social Engineering 98

Social Engineering Phishing System Administration Engineering 98

SecureList

OCTOBER 23, 2024

List of in-the-wild 0-days caught and reported by Kaspersky over the past 10 years Social activity What never ceases to impress us is how much effort Lazarus APT puts into their social engineering campaigns. First, we discovered that the game uses the Socket.IO The developers blamed an insider for this.

Engineering 145

Engineering Accountability Social Engineering Cryptocurrency 145

SecureWorld News

DECEMBER 14, 2022

Frank Abagnale, one of the world's most respected authorities on forgery, embezzlement, secure documents, cybercrime, and scams—and subject of the 2002 movie Catch Me If You Can — kicked off Vision 2023: Looking Ahead at Cyber Threats , a half-day educational event held live and recorded on December 13th.

CISO 96

CISO Social Engineering Cybercrime Education 96

Security Affairs

SEPTEMBER 5, 2022

Threat actors behind the campaign used a valid domain to send this malicious email, the domain used by the sender received a reputation score of trustworthy and global threat history of zero security events. SecurityAffairs – hacking, American Express). Pierluigi Paganini.

Phishing 100

Phishing Scams Social Engineering Password Management 100

Malwarebytes

APRIL 6, 2021

These phone numbers have been in the hands of some cybercriminals since 2019 due to a vulnerability in Facebook that allowed personal data to be scraped from the social media platform, until it was patched it in 2019. But now some miscreant has posted the entire dataset on a hacking forum, so every lowlife out there has access.

Scams 130

Scams Social Engineering Data breaches Media 130

Security Through Education

APRIL 26, 2021

2020 was the kickoff of our first annual Human Hacking Conference (HHC) , and unless you’ve been living under a rock (or you don’t follow us on social media ), you’ve heard us discussing our flagship event ever since. We were excited to be hosting our second annual event, The Human Hacking Conference — Year Beta!

Hacking 52

Hacking Social Engineering Engineering Phishing 52

SecureList

NOVEMBER 28, 2022

remain the same, lures that fraudsters use vary greatly depending on the time of year, current major events, news, etc. This summer for instance, cyberthieves stole 2 million dollars’ worth of items from an account that they hacked. Data from mental health apps will be used in accurately targeted social engineering attacks.

Education 137

Education Phishing Scams Social Engineering 137