Krebs on Security

FEBRUARY 26, 2023

Web hosting giant GoDaddy made headlines this month when it disclosed that a multi-year breach allowed intruders to steal company source code, siphon customer and employee login credentials, and foist malware on customer websites. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee.

Hacking 332

Hacking Social Engineering Phishing Scams 332

SecureWorld News

FEBRUARY 14, 2025

Be wary of romance scams "People can be vulnerable on February 14th," said Dave Machin , Partner at The Berkeley Partnership. "If If you're using a dating app or social media, watch out for people who claim to fall for you really fast but avoid video calls, meetups, or providing personal details."

Scams 74

Scams Cybercrime Phishing Social Engineering 74

Penetration Testing

JUNE 22, 2025

North Korean APT BlueNoroff (TA444) exploited deepfakes in Zoom calls to trick a crypto foundation employee into installing custom macOS malware for digital asset theft.

Malware 77

Malware Scams Social Engineering Cryptocurrency 77

Krebs on Security

AUGUST 19, 2021

Apparently now that includes emailing employees directly and asking them to unleash the malware inside their employer’s network in exchange for a percentage of any ransom amount paid by the victim company. Image: Abnormal Security. billion in 2020. . For example, the Lockbit 2.0 “Would you like to earn millions of dollars?

Ransomware 363

Ransomware Social Engineering Cybercrime Scams 363

SecureList

DECEMBER 17, 2024

The attackers would then send what appeared to be the photo itself but was actually a malware installer. In reality, this was malware with no parcel-tracking functionality whatsoever. Both scams targeted individual users only. Our security products detect the malware spreading via this scam as Trojan-Banker.AndroidOS.Mamont.

Scams 96

Scams Malware Banking Social Engineering 96

Security Boulevard

APRIL 25, 2025

The North Korean hackers behind the Contagious Interview worker scam, which threat intelligence analysts have followed since late 2023, are now hiding behind three bogus crypto companies they created as fronts for their info- and crypto-stealing operations.

Scams 80

Scams Social Engineering Data privacy Cryptocurrency 80

eSecurity Planet

APRIL 21, 2025

A Russian state-linked hacking group is ramping up its cyberattacks against diplomatic targets across Europe, using a new stealthy malware tool known as GrapeLoader to deliver malicious payloads through cleverly disguised phishing emails. The attackers also made sure the malware only activates in specific conditions.

Scams 57

Scams Phishing Social Engineering Malware 57

Webroot

MARCH 3, 2025

This month, take advantage of all that NCPW offers, including access to free tools and information that can help you identify and prevent online scams, fraud, and identity theft. Millions of customers were put at risk when their social security numbers, phone numbers, and other sensitive personal information were leaked.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

Security Boulevard

DECEMBER 14, 2021

Phishing scams continue to top the list of cybercrimes. Unfortunately, it’s likely 2022 will continue this trend as these types of social engineering attacks become more sophisticated. The post Preparing for Evolving Phishing Scams appeared first on Security Boulevard. The statistics are alarming.

Scams 126

Scams Phishing Social Engineering Cybercrime 126

Security Affairs

NOVEMBER 30, 2024

SpyLoan apps exploit social engineering to gain sensitive user data and excessive permissions, leading to extortion, harassment, and financial loss. Similar scams were reported globally. McAfee researchers discovered 15 SpyLoan Android apps on Google Play with a combined total of over 8 million installs.

Social Engineering 132

Social Engineering Media Mobile Scams 132

Security Affairs

SEPTEMBER 29, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 129

Malware Social Engineering IoT Scams 129

Malwarebytes

FEBRUARY 10, 2021

Google and researchers at Stanford University have released an in-depth study analysing 5 months of phishing / malware mails sent globally. “Who is targeted by email-based phishing and malware? Attacks primarily focus on North America and Europe, with the US receiving the highest volume of phishing and malware mails.

Scams 140

Scams Phishing Data breaches Malware 140

SecureWorld News

OCTOBER 3, 2023

And one of the most successful and increasingly prevalent ways of attack has come from social engineering, which is when criminals manipulate humans directly to gain access to confidential information. Social engineering is more sophisticated than ever, and its most advanced iteration is the topic of today's discussion: deepfakes.

Social Engineering 109

Social Engineering Phishing Engineering Technology 109

SecureList

MARCH 25, 2025

Note that for mobile banking malware, we retrospectively revised the 2023 numbers to provide more accurate statistics. We also changed the methodology for PC banking malware by removing obsolete families that no longer use Trojan banker functionality, hence the sharp drop in numbers against 2023. million detections compared to 5.84

Phishing 77

Phishing Banking Scams Mobile 77

Malwarebytes

FEBRUARY 4, 2025

These agents could even hold people for ransom by matching stolen data online with publicly known email addresses or social media accounts, composing messages and holding entire conversations with victims who believe a human hacker out there has access to their Social Security Number, physical address, credit card info, and more.

Artificial Intelligence 144

Artificial Intelligence Small Business Malware Technology 144

The Hacker News

NOVEMBER 23, 2024

The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of cryptocurrency as part of social engineering campaigns orchestrated over a six-month period.

Social Engineering 130

Social Engineering Scams Cryptocurrency Malware 130

Security Boulevard

JANUARY 20, 2025

Vulnerabilities and Malware Primarily includes severe and exploited vulnerabilities in devices or software used by end users (ex: a major router firmware flaw). Malware campaigns covered generally target/affect the end user. Successful exploitation requires social engineering users into manipulating a specially crafted file.

Surveillance 97

Surveillance Malware Data breaches Scams 97

CyberSecurity Insiders

NOVEMBER 25, 2021

In the latest report released by Avast, it was revealed that ransomware spreading hackers were constantly targeting elderly people and youngsters were being lured into Instagram or TikTok scams. And this is where cyber criminals are smartly targeting these groups with scams by adopting the current trending topics or usage trends.

Scams 117

Scams Ransomware Identity Theft Adware 117

Malwarebytes

AUGUST 22, 2022

In her post , she broke down the scam into four phases, reflecting the scammers' intent in each stage: Dismay, Isolate, Overwhelm, and Intimidate. She then realized she was about to be scammed. Even with the application deleted, we had to assume that the device remained infected with malware. Scammers know what people don't.

Social Engineering 97

Social Engineering Engineering Banking Scams 97

The Last Watchdog

APRIL 6, 2020

This can make them particularly susceptible to social engineering trickery, the trigger for online extortion and fraud campaigns, Bastable told me. These scams rely on the failure of a subordinate employee to recognize a cleverly spoofed email directive. The total stolen: $2.3 The FBI is investigating. No arrests have been made.

Scams 147

Scams Social Engineering Ransomware Engineering 147

Malwarebytes

MARCH 10, 2025

I realize that may sound like something trivial to steer clear from, but apparently its not because the social engineering behind it is pretty sophisticated. Use an active anti-malware solution that blocks malicious websites and scripts. Use a browser extension that blocks malicious domains and scams.

Social Engineering 140

Social Engineering Media Scams Malware 140

Security Affairs

MARCH 8, 2020

Experts uncovered a new Coronavirus (COVID-19 ) -themed campaign that is distributing a malware downloader that delivers the FormBook information-stealing Trojan. Experts at MalwareHunterTeam uncovered a new malspam campaign exploiting the fear in the Coronavirus (COVID-19) to deliver malware. states the analysis published by FireEye.

Malware 145

Malware Scams Social Engineering Phishing 145

SecureWorld News

MARCH 11, 2022

Famed hacker Kevin Mitnick learned early on to use emotion to manipulate and socially engineer his targets. At the time, his targets were typically sysadmins, and the social engineering started with a phone call. If you hover over the link you'll see it goes to a scam site called mothersawakening.

Social Engineering 97

Social Engineering Engineering Phishing Accountability 97

Krebs on Security

OCTOBER 25, 2018

The fraudsters behind the often laughable Nigerian prince email scams have long since branched out into far more serious and lucrative forms of fraud, including account takeovers, phishing, dating scams, and malware deployment. The FBI says BEC scams netted thieves more than $12 billion between 2013 and 2018.

Scams 242

Scams Accountability Media Banking 242

Security Affairs

OCTOBER 20, 2021

A Cookie Theft malware was employed in phishing attacks against YouTube creators, Google’s Threat Analysis Group (TAG) warns. Financially motivated threat actors are using Cookie Theft malware in phishing attacks against YouTube creators since late 2019. The hackers used fake collaboration opportunities (i.e. Pierluigi Paganini.

Accountability 145

Accountability Malware Phishing Social Engineering 145

Krebs on Security

APRIL 6, 2022

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors and state-sponsored hacking groups, both of which tend to take days or weeks to pivot from an opportunistic malware infection to a full blown data breach. The flash scam netted the perpetrators more than $100,000 in the ensuing hours.

Social Engineering 293

Social Engineering Phishing Accountability Engineering 293

Security Boulevard

JULY 26, 2023

The post Attackers are Hiding Malware Behind Barbie-Themed Scams appeared first on Security Boulevard. What isn’t surprising are the online fraudsters who have latched onto the surefire summer blockbuster, with threat researchers from McAfee tracking a range.

Scams 98

Scams Malware Social Engineering Engineering 98

Malwarebytes

JANUARY 20, 2022

Malvertising often uses a combination of exploits to drop malware. Phishing campaigns get the job done with social engineering and bogus websites. All of these tips combined will help you avoid gift card scams. . The post Steer clear of gift card balance scams appeared first on Malwarebytes Labs.

Scams 141

Scams Social Engineering Engineering Phishing 141

Penetration Testing

JUNE 9, 2025

Beware 'imad213,' a fake Instagram booster stealing credentials via social engineering and bot services. Learn how to protect your account.

Social Engineering 70

Social Engineering Engineering Accountability Scams 70

Approachable Cyber Threats

MARCH 12, 2025

Category Awareness, Social Enginering Risk Level Phishing emails are getting harder to detect. Todays phishing scams are sophisticated, tailored for you, and often indistinguishable from real communications. These tactics, called spear phishing , make it incredibly hard for even tech-savvy users to spot a scam.

Phishing 53

Phishing Scams Social Engineering Artificial Intelligence 53

Joseph Steinberg

JANUARY 19, 2024

Of course, scam calls warning about the termination of utility service if a payment is not made immediately are nothing new. Hence, criminals do seem to increase their perpetration of utility-shutoff scams at times of extreme weather. I was tempted to ask the caller if she could see my payment for $527.01

Scams 268

Scams Accountability Artificial Intelligence Data breaches 268

Security Affairs

JUNE 9, 2025

OpenAI banned ChatGPT accounts tied to Russian and Chinese hackers using the tool for malware, social media abuse, and U.S. The blocked accounts were used to assist malware development, social media automation, and research about U.S. satellite tech research. We banned the OpenAI accounts used by this adversary.”

Accountability 75

Accountability Social Engineering Media Penetration Testing 75

Hacker Combat

OCTOBER 25, 2021

Google has reported that it disrupted the phishing attacks where threat actors had tried to hijack various YouTube accounts using cookie theft malware. The hijacker’s intent was to use those accounts to promote different crypto-currency scams. . The malware has the ability to steal passwords and cookies.

Accountability 126

Accountability Malware Scams Antivirus 126

Security Boulevard

MARCH 16, 2023

Ben is disappointed: FBI reports huge rise in cryptocurrency investment scams. The post Scams Lost US $10 BILLION in 2022 — Crypto Fraud Grows Fast appeared first on Security Boulevard. Why am I not surprised?

Scams 140

Scams Cryptocurrency Social Engineering Internet 140

Security Boulevard

JUNE 7, 2021

Roughly 2% of the top-grossing apps in Apple’s store are, in some way, “scams,” claims the Daily Bezos. The post Is Apple’s App Store ‘Teeming’ with Scams? appeared first on Security Boulevard.

Scams 126

Scams Social Engineering Security Awareness Engineering 126

eSecurity Planet

FEBRUARY 26, 2025

The research found a sharp rise in mobile phishing attacks, with cybercriminals moving away from traditional email scams in favor of SMS-based attacks. Cybercriminals disguise messages as urgent notifications from banks, government agencies, or corporate IT teams, tricking users into providing credentials or downloading malware.

Phishing 82

Phishing Mobile Social Engineering Data breaches 82

Security Boulevard

MARCH 17, 2025

Cyberattacks dont always rely on sophisticated exploits or advanced malware. In reality, many of the most successful breaches stem from simple tactics like phishing emails, social engineering, and exploiting basic security misconfigurations. Victims can be easily deceived or manipulated. Even technical personnel are not immune.

Cybersecurity 52

Cybersecurity Social Engineering Scams Engineering 52