Security Affairs

NOVEMBER 21, 2024

The cybercrime group Scattered Spider is suspected of hacking into hundreds of organizations over the past two years, including Twilio , LastPass , DoorDash , and Mailchimp. They impersonated help desk technicians, sent the victims fake VPN deactivation warnings, and used password reset scams to gain access to company systems.

Cybercrime 113

Cybercrime Identity Theft Cryptocurrency Phishing 113

Security Affairs

JUNE 17, 2024

Offers that promise easy earnings can also bring with them a host of scams that deceive those who are genuinely seeking income opportunities. t is into this scenario that illicit practices such as moneny mules and reshipping scams can fit. In practice, packages arrived with prepaid shipping labels with stolen credit cards.

Scams 137

Scams Marketing Education Banking 137

Security Affairs

MARCH 4, 2025

In one particular case, the report believe that a single individual adopted multiple personas to promote the scam, using a Laptop Farm specifically configured to hide the real geolocation of the various remote workstations. He is also the author of the book La Gestione della Cyber Security nella Pubblica Amministrazione.

Risk 126

Risk Education Scams VPN 126

Security Boulevard

OCTOBER 25, 2024

Gary Perkins, Chief Information Security Officer Social engineers rely on two key psychological triggers: urgency and empathy. Attackers don’t just hack systems; they hack people, and they’re exceptionally good at it. The post Cyber Scams & Why We Fall for Them appeared first on Security Boulevard.

Scams 105

Scams Social Engineering CISO Engineering 105

Security Affairs

DECEMBER 2, 2024

Operation HAECHI V (July-Nov 2024) targeted cyber frauds like phishing, romance scams, sextortion, investment fraud, online gambling, BEC, and e-commerce fraud. The authorities have warned of “USDT Token Approval Scam” that allows scammers access to the victims’ cryptocurrency wallets and make unauthorized transactions.

Cryptocurrency 130

Cryptocurrency Phishing Scams Cybercrime 130

Security Affairs

AUGUST 29, 2020

The FBI is warning of online romance scams and related financial losses, overall losses associated with those complaints exceeded $475 million. Crooks behind romance scams use fake online identities to establish a contact with the potential victims and gain their trust. SecurityAffairs – hacking, romance scams).

Scams 144

Scams Internet Internet Advertising 144

Security Affairs

APRIL 7, 2025

A campaign named PoisonSeed uses stolen CRM and bulk email credentials to send crypto seed scams, aiming to empty victims’ digital wallets. “ Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, cybercrime)

Scams 76

Scams Cryptocurrency Phishing Cybercrime 76

Security Affairs

MARCH 24, 2024

During the month of Ramadan, Resecurity observed a significant increase in fraudulent activities and scams. During the month of Ramadan, Resecurity observed a significant increase in fraudulent activities and scams, coinciding with a surge in retail and online transactions.

Scams 138

Scams Consumer Protection Retail Government 138

Security Affairs

MARCH 12, 2024

Threat actors can abuse QR codes to carry out sophisticated scams, as reported by the Italian Postal Police in its recent alert. They are widely used to access information, services, or online payments quickly and conveniently. However, they can also hide scams, as denounced by the Italian Postal Police in its recent alert.

Insurance 139

Insurance Scams Education Engineering 139

Security Affairs

NOVEMBER 16, 2020

The archive was used by crooks as part of a global hacking campaign against users of the social network. “We discovered the scam via an unsecured database used by the fraudsters to store private data belonging to 100,000s of their victims.” SecurityAffairs – hacking, scam). ” concludes the report.

Scams 123

Scams Accountability Hacking Passwords 123

Security Affairs

NOVEMBER 25, 2024

Thai authorities uncovered call center gangs using fake “02” numbers to deceive citizens into scams and fraudulent investments, generating over 700 million calls. Thai cyber police uncovered three companies using SIP Trunk technology to operate fake “02” numbers, generating 730 million scam calls.

Mobile 127

Mobile Scams Technology Telecommunications 127

Security Affairs

MAY 30, 2022

Experts warn of a new ongoing WhatsApp OTP scam that could allow attackers to hijack users’ accounts through phone calls. Recently CloudSEK founder Rahul Sasi warned of an ongoing WhatsApp OTP scam that could allow threat actors to hijack users’ accounts through phone calls. SecurityAffairs – hacking, WhatsApp).

Scams 145

Scams Accountability Mobile Hacking 145

Security Affairs

JUNE 10, 2021

Overall, fraud accounts for 73% of all online attacks: 56% are scams (fraud that results in the victim voluntarily disclosing sensitive data) and 17% are phishing attacks (theft of bank card details). In 2020, a multi-stage scam called Rabbit Hole targeted companies’ brands, primarily retail and online services.

Scams 134

Scams Banking Retail Insurance 134

Security Affairs

NOVEMBER 30, 2024

Similar scams were reported globally. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Google Play) Authorities in Peru raided a call center tied to SpyLoan apps that extorted 7,000+ victims in Peru, Mexico, and Chile. ” concludes the report.

Social Engineering 132

Social Engineering Media Mobile Scams 132

Security Affairs

APRIL 28, 2020

Kaspersky experts uncovered a new wave of phishing scams that use a COVID-19 theme and impersonate shipping carriers, including FedEx, UPS, and DHL. Kaspersky observed COVID-19-themed phishing scams that impersonate popular shipping carriers such as FedEx, UPS, and DHL. SecurityAffairs – phishing, hacking). Pierluigi Paganini.

Scams 141

Scams Phishing Advertising Hacking 141

Security Affairs

APRIL 21, 2020

However, you can defend against the scams by taking certain protective measures that are listed below: Do not give your personal information: A common theme for most coronavirus phishing emails seems to be the inquiry for personal information such as Social Security Number or login information. Pierluigi Paganini.

Scams 137

Scams Phishing Artificial Intelligence VPN 137

Security Affairs

JULY 5, 2022

Threat actors compromised the Twitter and YouTube accounts of the British Army to promote online crypto scams. The Twitter and YouTube accounts of the British Army were used to promote NFT and other crypto scams. The Army takes information security extremely seriously and is resolving the issue. Pierluigi Paganini.

Scams 110

Scams Accountability Authentication Cryptocurrency 110

Security Affairs

MAY 12, 2025

Fake AI tools spread via social media and scam websites like “Dream Machine” or “CapCut” bait users into uploading media. The report includes Indicators of Compromise (IOCs) for this campaign Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,fake AI tools)

Malware 114

Malware Media Cybercrime Scams 114

Security Affairs

FEBRUARY 2, 2025

A joint law enforcement operation led to the seizure of 39 domains tied to a Pakistan-based HeartSender cybercrime group (aka Saim Raza and Manipulators Team) known for selling hacking and fraud tools. Cybercriminals used the seized domains to run BEC scams, stealing credentials and redirecting payments.

Cybercrime 112

Cybercrime Advertising Phishing Hacking 112

The Last Watchdog

JUNE 21, 2020

This quirk made the attack look more trustworthy and added a layer of flexibility to these scams. In many cases, the crooks hack managed service providers (MSPs) first and then use this access to compromise the partnering organizations. The FBI-themed ransomware was one of the most prolific infections at the time.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

OCTOBER 14, 2024

The Bohemia marketplace ceased operations in late 2023 due to service disruptions, while its members suspected an exit scams of a rogue developer. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, dark web) ” reads the announcement published by Polite.

Marketing 130

Marketing Cybercrime DDOS Cryptocurrency 130

Security Affairs

JANUARY 21, 2025

CERT-UA warned of scammers impersonating the agency, using fake AnyDesk requests to conduct fraudulent security audits. The Computer Emergency Response Team of Ukraine (CERT-UA) warned of cyber scams involving threat actors impersonating the agency by sending fraudulent AnyDesk connection requests under the guise of security audits.

Social Engineering 112

Social Engineering Scams Engineering Software 112

Security Affairs

APRIL 7, 2020

While crooks continue to exploit the Coronavirus outbreak, the Europol announced to have arrested a man involved in COVID19 business scams. The Europol announced the arrest of a 39-year old man that is allegedly involved in Business email scam (BEC) connected to the current Coronavirus outbreak. The man has stolen €6.64

Scams 140

Scams Advertising Banking Information Security 140

Security Affairs

SEPTEMBER 4, 2021

The US Securities and Exchange Commission warns investors of potential investment scams that leverages Hurricane Ida as a bait. The US Securities and Exchange Commission (SEC)’s Office of Investor Education and Advocacy is warning investors of potential investment scams related to Hurricane Ida. Pierluigi Paganini.

Scams 116

Scams Insurance Education Hacking 116

Security Affairs

APRIL 21, 2022

Threat intelligence firm Resecurity details how crooks are delivering IRS tax scams and phishing attacks posing as government vendors. SecurityAffairs – hacking, IRS tax scam). The post Cybercriminals Deliver IRS Tax Scams & Phishing Campaigns By Mimicking Government Vendors appeared first on Security Affairs.

Scams 133

Scams Phishing Government Passwords 133

Security Affairs

JANUARY 10, 2025

“Outside of this campaign, we are aware of scams involving false offers of employment with CrowdStrike. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, newsletter) ” concludes the report.

Phishing 116

Phishing Scams Malware Authentication 116

Security Affairs

NOVEMBER 17, 2024

Agency Warns Employees About Phone Use Amid Ongoing China Hack APT Actors Embed Malware within macOS Flutter Applications The Botnet is Back: SSC STRIKE Team Uncovers a Renewed Cyber Threat Iranian “Dream Job” Campaign 11.24

Cryptocurrency 114

Cryptocurrency Malware Hacking Ransomware 114

Security Affairs

FEBRUARY 17, 2021

Malvertising gang ScamClub has exploited an unpatched zero-day vulnerability in WebKit-based browsers in a campaign aimed at realizing online gift card scams. The malvertising campaign was first spotted in June 2020 and is still ongoing despite the flaw has been addressed with the release of security updates early this month.

Scams 125

Scams Engineering Hacking Information Security 125

Security Affairs

APRIL 8, 2025

The Tor leak site of the Everest ransomware group went offline after being hacked and defaced over the weekend. The Everest ransomware gangs darknet site went offline after being hacked and defaced, with victim listings replaced by the following message. We cannot exclude the fact that the incident is an exit scam of the group.

Ransomware 87

Ransomware Healthcare Hacking Scams 87

Security Affairs

OCTOBER 16, 2024

The Bohemia marketplace ceased operations in late 2023 due to service disruptions, while its members suspected an exit scams of a rogue developer. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Sipulitie)

Marketing 124

Marketing Cybercrime Scams Hacking 124

Security Affairs

APRIL 10, 2025

Their TrustPilot pages show many 5-star reviews with similar, likely AI-generated content, and occasional 1-star reviews calling them scams or spammy. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,spam)

eCommerce 131

eCommerce Technology DNS Business Services 131

Security Affairs

JANUARY 11, 2024

The X account of cybersecurity firm Mandiant was likely hacked through a brute-force password attack, the company revealed. Last week, threat actors hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. ” the company said on X.

Accountability 139

Accountability Hacking Cryptocurrency Cybersecurity 139

Security Affairs

SEPTEMBER 26, 2023

Sony launched an investigation into an alleged data breach after the RansomedVC group claimed the hack of the company. Sony announced it is investigating allegations of a data breach after the RansomedVC extortion group claimed to have hacked the company and added the company to its Tor leak site. “We Enjoy the leak.”

Hacking 133

Hacking Data breaches Ransomware Scams 133

Security Affairs

JANUARY 12, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 61

Malware Scams Phishing Encryption 61

Krebs on Security

MARCH 7, 2022

In 2020, researchers from Athens University School of Information Sciences and Technology in Greece showed (PDF) how ransomware-as-a-service offerings might one day be executed through smart contracts. Before that, Jeffrey Ladish , an information security consultant based in Oakland, Calif., As Gizmodo first reported on Nov.

Ransomware 277

Ransomware Cryptocurrency DDOS Scams 277

Security Affairs

APRIL 28, 2025

In the aftermath, several alternative forums emerged, some demanded entry fees, fueling confusion and raising the risk of scams or government-run honeypots. It served as a marketplace for threat actors to buy and sell stolen data, hacking tools, and compromised credentials.

Risk 84

Risk Hacking Cybercrime Scams 84

Security Affairs

MAY 19, 2020

“Since we became aware of the incident, it has become clear that owing to COVID-19, there is heightened concern about personal data being used for online scams. ” @easyJet please can someone DM regarding me cancelling my holiday and this security breach, not leaving this another seven days with no response? .”

Hacking 139

Hacking Cyber Attacks Advertising Scams 139