Penetration Testing

APRIL 2, 2024

A new report from Intel 471 highlights a disturbing increase in targeted phishing attacks launched by a loosely affiliated group of cybercriminals known as “The Com” which is short for “The Community.”

Phishing 104

Phishing Penetration Testing Ransomware 104

Penetration Testing

FEBRUARY 29, 2024

Security experts from Hunt are currently tracking a sophisticated phishing scheme aimed squarely at entrepreneurs operating within Telegram communities... The post Lazarus Group Suspected in Telegram Phishing Attacks on Investors appeared first on Penetration Testing.

Phishing 110

Phishing Penetration Testing Risk Malware 110

Penetration Testing

FEBRUARY 18, 2024

The Italian Computer Security Incident Response Team (CSIRT) has issued a critical warning about a resurgence of the “Helpdesk Support” phishing campaign.

Phishing 105

Phishing Penetration Testing 105

eSecurity Planet

APRIL 7, 2023

Kali Linux turns 10 this year, and to celebrate, the Linux penetration testing distribution has added defensive security tools to its arsenal of open-source security tools. Also read: 24 Top Open Source Penetration Testing Tools What Is Penetration Testing? An ethical hacking certification may help too.

Penetration Testing 140

Penetration Testing Social Engineering Energy and Utilities Hacking 140

eSecurity Planet

FEBRUARY 20, 2023

Penetration tests find security vulnerabilities before hackers do and are critical for keeping organizations safe from cyber threats. Penetration test services have become common, with many security companies offering them. The program answers what, when, why, and where tests should run.

Penetration Testing 95

Penetration Testing Cyber threats Engineering Architecture 95

Penetration Testing

APRIL 11, 2024

Cryptocurrency enthusiasts are being urged to exercise extreme caution after a new phishing campaign was uncovered by cybersecurity researchers at Cyble Research and Intelligence Labs (CRIL).

Cryptocurrency 79

Cryptocurrency Phishing Penetration Testing Cybersecurity 79

Penetration Testing

APRIL 15, 2024

A sophisticated and coordinated cyber phishing campaign has been targeting major financial institutions across Southeast Asia, according to a recent report by Cyberint.

Phishing 78

Phishing Penetration Testing 78

Penetration Testing

FEBRUARY 26, 2024

Cyble Research and Intelligence Labs (CRIL) has uncovered a sophisticated phishing campaign actively exploiting ConnectWise ScreenConnect, a widely-used remote support and administration tool.

Healthcare 82

Healthcare Phishing Penetration Testing 82

Penetration Testing

JANUARY 30, 2024

While phishing attacks via email are well-known, many users remain unaware of the dangers lurking within... The post The DarkGate Deception: How Microsoft Teams Became a Phishing Playground appeared first on Penetration Testing.

Phishing 105

Phishing Penetration Testing Cyber threats Malware 105

Penetration Testing

JANUARY 28, 2024

A detailed analysis by Dongwook Kim and Seulgi Lee from KrCERT/CC, reveals how this... The post From Spear-Phishing to Zero-Day: Lazarus Group’s Latest Cyber Strategies appeared first on Penetration Testing.

Phishing 107

Phishing Penetration Testing Ransomware 107

Penetration Testing

MARCH 8, 2024

According to the Hong Kong Computer Emergency Response Coordination Centre (HKCERT), Hong Kong is facing an increasingly complex phishing threat landscape.

Phishing 82

Phishing Penetration Testing Banking Government 82

Penetration Testing

DECEMBER 25, 2023

Indian governmental structures and the defense sector have become the targets of a sophisticated hacker attack, leveraging phishing techniques and malicious software based on Rust for intelligence gathering.

Phishing 95

Phishing Penetration Testing Software Malware 95

SecureWorld News

JUNE 28, 2020

With many organizations now planning their annual penetration tests ("pentest" for short), a change is needed in order to accommodate remote workers. It also begs what are you allowed to test versus what is now considered taboo considering end-users may be operating with their own personal equipment?

Penetration Testing 90

Penetration Testing Social Engineering VPN Phishing 90

Penetration Testing

JANUARY 30, 2024

Trustwave SpiderLabs has been closely monitoring an upsurge in the use of the “Greatness” phishing... The post Greatness Phishing Kit: The New Cyber Menace Targeting Microsoft 365 appeared first on Penetration Testing.

Phishing 79

Phishing Penetration Testing Cyber threats 79

Penetration Testing

FEBRUARY 22, 2024

A recent investigation by Trustwave SpiderLabs’ Email Security team has uncovered a sophisticated Phishing-as-a-Service (PaaS) platform known as Tycoon Group.

Phishing 81

Phishing Penetration Testing Risk 81

Penetration Testing

DECEMBER 18, 2023

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Many of these Slack workspaces... The post EvilSlackbot: A Slack bot phishing framework for Red Teaming exercises appeared first on Penetration Testing.

Phishing 93

Phishing Penetration Testing Social Engineering Engineering 93

Penetration Testing

APRIL 29, 2024

A disturbing new report by Akamai security researchers highlights the shocking scale of phishing scams impersonating the United States Postal Service (USPS).

Scams 103

Scams Penetration Testing Phishing Malware 103

Penetration Testing

DECEMBER 7, 2023

In a digital age teeming with cyber threats, FortiGuard Labs recently identified an email phishing campaign that spread MrAnon Stealer malware.

Phishing 96

Phishing Penetration Testing Cyber threats Malware 96

Penetration Testing

DECEMBER 2, 2023

Recently, a cunning phishing scam has emerged, targeting unsuspecting WordPress users with a fabricated security flaw, CVE-2023-45124. This sophisticated ruse, uncovered by the Wordfence Threat... The post WordPress Phishing Scam Exploits Fake CVE-2023-45124 Vulnerability appeared first on Penetration Testing.

Scams 82

Scams Phishing Penetration Testing Cybersecurity 82

Penetration Testing

NOVEMBER 14, 2023

In Malaysia, authorities have announced the dismantlement of a Phishing-as-a-Service (PaaS) operation known as BulletProofLink. ... The post BulletProofLink Phishing Platform Seized by Malaysian Police appeared first on Penetration Testing.

Phishing 78

Phishing Penetration Testing 78

Penetration Testing

DECEMBER 18, 2023

This group orchestrates sophisticated phishing attacks through email and SMS, targeting retail networks during... The post Phishing Feast: Storm-0539 Targets Retailers for Holiday Haul appeared first on Penetration Testing.

Retail 77

Retail Phishing Penetration Testing 77

Malwarebytes

JUNE 1, 2021

Metasploit—probably the best known project for penetration testing—is an exploit framework, designed to make it easy for someone to launch an exploit against a particular vulnerable target. So how this usually goes, is an infection occurs, be it phishing, manual breaches by brute forcing a port, or even an exploit.

Penetration Testing 97

Penetration Testing Malware Ransomware Phishing 97

Penetration Testing

NOVEMBER 22, 2023

According to statistics from cybersecurity company ANY.RUN, the year 2023 witnessed the rise of QR codes, CAPTCHA, and steganography as popular phishing methods.

Phishing 78

Phishing Penetration Testing Cybersecurity Malware 78

Penetration Testing

DECEMBER 25, 2023

In the shadowy realms of cyber warfare, a new and alarming phishing campaign emerges, orchestrated by the notorious UAC-0050 group.

Phishing 85

Phishing Penetration Testing Malware 85

Herjavec Group

DECEMBER 14, 2020

Therefore, organizations must work to continuously test their security programs. In order to do so, there are two security assessments we recommend undertaking: network penetration testing and/or Red Team Operations. What is Penetration Testing? How Penetration Tests & Red Team Operations are Executed.

Penetration Testing 59

Penetration Testing Architecture Cybercrime Phishing 59

Penetration Testing

DECEMBER 12, 2023

Microsoft’s latest Threat Intelligence report unveils a revelation: threat actors are now exploiting OAuth... The post Phishing for Profits: Attackers Mine Crypto & Spam Through OAuth Apps appeared first on Penetration Testing.

Phishing 83

Phishing Penetration Testing Cyber threats 83

Penetration Testing

DECEMBER 1, 2023

A recent report by Zimperium has revealed the discovery of 245 counterfeit mobile applications, designed to mimic... The post Iran’s Phishing Pandemic: 245 Fake Banking Apps Target Citizens appeared first on Penetration Testing.

Banking 78

Banking Phishing Penetration Testing Cybercrime 78

Penetration Testing

DECEMBER 7, 2023

This financially motivated group has been active since the second quarter of... The post US Enterprises Targeted: Silent Push Unmasks Scattered Spider’s Phishing Web appeared first on Penetration Testing.

Phishing 79

Phishing Penetration Testing Cyber threats 79

Penetration Testing

NOVEMBER 20, 2023

In the ever-shifting landscape of cyber threats, a new player has emerged with a sophisticated phishing campaign spreading the DarkGate malware.

Phishing 79

Phishing Penetration Testing Malware Cyber threats 79

Penetration Testing

APRIL 11, 2024

These attacks are not your typical phishing scams or malware; they are meticulously crafted, state-sponsored operations... The post Apple Warns Users of Targeted Spyware Attacks – Here’s How to Stay Safe appeared first on Penetration Testing.

Spyware 101

Spyware Penetration Testing Scams Phishing 101

Penetration Testing

FEBRUARY 28, 2024

Cisco Talos has discovered a highly targeted and persistent phishing campaign preying on users in Mexico.

Penetration Testing 107

Penetration Testing Phishing 107

Penetration Testing

MARCH 6, 2024

This group has displayed a consistent pattern of sophisticated phishing tactics in pursuit of sensitive corporate data, often followed by damaging BEC scams. Since... The post TA4903 – A Cybercriminal Group with a Focus on Financial Gain appeared first on Penetration Testing.

Penetration Testing 103

Penetration Testing Scams Phishing 103

Penetration Testing

APRIL 7, 2024

An orchestrated phishing scheme has surfaced, exploiting the illusion of suspended web pages to deliver a nasty payload of malware. Security experts at SpiderLabs recently uncovered this threat,... The post Latin America Under Siege: Phishers Weaponize Fake Suspended Domains appeared first on Penetration Testing.

Penetration Testing 82

Penetration Testing Phishing Malware 82

Penetration Testing

FEBRUARY 26, 2024

The attackers capitalize on trust associated with Booking.com, crafting phishing emails that appear... The post Booking.com Impersonation Campaign: Agent Tesla Malware Analysis appeared first on Penetration Testing.

Malware 88

Malware Penetration Testing Phishing 88

Penetration Testing

MARCH 21, 2024

Cybersecurity researchers at Proofpoint have uncovered a new wave of targeted phishing attacks attributed to the Iran-aligned hacking group TA450. TA450 Back with Salary Scam Emails appeared first on Penetration Testing.

Scams 78

Scams Penetration Testing Phishing Hacking 78

NopSec

AUGUST 9, 2022

Once you’ve started a vulnerability scanning system , you may want to take the next step in identifying vulnerabilities: penetration testing, commonly referred to as pentesting. The Basics of Penetration Testing Pentesting can be as broad or narrow as the client wishes. This more closely simulates an actual cyber attack.

Penetration Testing 40

Penetration Testing Wireless Risk Social Engineering 40

Penetration Testing

MARCH 6, 2024

Threat actors (TAs) are weaponizing a combination of social engineering, phishing infrastructure, and an advanced Android banking trojan to... The post Copybara Fraud Campaign Leverages On-Device Fraud and Social Engineering Tactics appeared first on Penetration Testing.

Social Engineering 83

Social Engineering Engineering Penetration Testing Banking 83