Security Boulevard

MARCH 3, 2021

Another reason is that social engineering lures may be expertly crafted by the attacker after they have been monitoring a victim’s activity for some time, resulting in more effective phishing campaigns with serious security implications. Continue reading Trojan Spyware and BEC Attacks at Sucuri Blog.

Spyware 73

Spyware Social Engineering Phishing Engineering 73

Security Affairs

DECEMBER 21, 2023

Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882 (CVSS score: 7.8), as part of phishing campaigns to spread the Agent Tesla malware. Agent Tesla is a spyware that is used to spy on the victims by collecting keystrokes, system clipboard, screenshots, and credentials from the infected system.

Malware 103

Malware Phishing Spyware Cyber threats 103

Security Affairs

FEBRUARY 24, 2021

The threat actors used by spyware to take over the target systems, spy on the victims, and exfiltrate data. ” The attack chain begins with spear-phishing messages that include a link to an alleged important document to download. The link points to files containing spyware that could infect both Mac OS or Windows systems.

Spyware 89

Spyware Surveillance Government Phishing 89

SecureList

MARCH 19, 2024

By percentage of ICS computers on which spyware was blocked. Regions ranked by percentage of ICS computers on which spyware was blocked, H2 2023 By percentage of ICS computers on which worms were blocked. One of the two regions where the percentage of ICS computers on which spyware was blocked rose in the six-month period.

Spyware 100

Spyware Phishing Internet Internet 100

SecureWorld News

NOVEMBER 2, 2022

government threat report , released this morning and titled "Rise in Mobile Phishing Credential Theft Targeting Public Sector," includes these key findings: Nearly 50% of state and local government employees are running outdated Android operating systems, exposing them to hundreds of device vulnerabilities.

Mobile 96

Mobile Government Phishing Risk 96

The Hacker News

OCTOBER 16, 2023

Typically spread via SMS phishing campaigns, attack chains involving the spyware trick potential victims into installing the app by clicking on the embedded link, according to F-Secure. The Android banking trojan known as SpyNote has been dissected to reveal its diverse information-gathering features.

Spyware 132

Spyware Banking Phishing 132

Dark Reading

MARCH 7, 2023

Attackers use phishing emails that appear to come from reputable organizations, dropping the payload using public cloud servers and an old Windows UAC bypass technique.

Spyware 101

Spyware Phishing 101

SecureList

FEBRUARY 16, 2023

Short-lived phishing sites often offered to see the premieres before the eagerly awaited movie or television show was scheduled to hit the screen. At the beginning of that year, we still observed phishing attacks that used the themes of infection and prevention as the bait.

Phishing 92

Phishing Scams Accountability Energy and Utilities 92

Threatpost

AUGUST 20, 2019

A phishing campaign targeting utility grid operators uses a PDF attachment to deliver spyware.

Spyware 77

Spyware Phishing Antivirus Malware 77

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Secure web- phishing. In the first six months of 2020, CERT-GIB blocked a total of 9 304 phishing web resources, which is an increase of 9 percent compared to the previous year.

Phishing 106

Phishing Ransomware Spyware Banking 106

Threatpost

APRIL 21, 2020

Highly targeted spearphishing emails are being sent to oil and gas companies in hopes of infecting them with the Agent Tesla spyware.

Spyware 100

Spyware Phishing Malware Hacking 100

Security Affairs

JUNE 15, 2020

The Earth Empusa threat group is distributing new Android spyware, dubbed ActionSpy, through watering hole attacks to targets Turkic minority group. Attackers injected the malicious code to deploy the spyware in websites, some of them were actually fake. The server, in turn, may send some commands to the compromised device.

Spyware 68

Spyware Advertising Encryption Phishing 68

Security Affairs

MARCH 10, 2024

Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsApp Cybercrime BlackCat Ransomware Affiliate TTPs American Express credit cards EXPOSED in third-party vendor data breach – account numbers and names among details accessed in hack LockBit 3.0’S

Spyware 94

Spyware Data breaches Hacking Ransomware 94

Security Affairs

JULY 21, 2021

FormBook is a data-stealing malware that is used in cyber espionage campaigns, like other spyware it is capable of extracting data from HTTP sessions, keystroke logging, stealing clipboard contents. The post XLoader, a $49 spyware that could target both Windows and macOS devices appeared first on Security Affairs. Pierluigi Paganini.

Spyware 104

Spyware Malware Cybercrime Advertising 104

Bleeping Computer

FEBRUARY 22, 2023

Threat actors are actively exploiting the popularity of OpenAI's ChatGPT AI tool to distribute Windows malware, infect Android devices with spyware, or direct unsuspecting victims to phishing pages. [.]

Malware 109

Malware Spyware Phishing 109

Schneier on Security

MAY 5, 2020

Unlike most of the shady apps found in Play Store malware, Kaspersky's researchers say, PhantomLance's hackers apparently smuggled in data-stealing apps with the aim of infecting only some hundreds of users; the spy campaign likely sent links to the malicious apps to those targets via phishing emails. "In

Malware 291

Malware Spyware Phishing Government 291

SecureList

FEBRUARY 15, 2021

The Kaspersky Anti-Phishing component blocked 434,898,635 attempts at accessing scam sites. The most frequent targets of phishing attacks were online stores (18.12 The contact phone trick was heavily used both in email messages and on phishing pages. Agentb malware family. Trends of the year. Malicious links.

Phishing 138

Phishing Malware Scams Accountability 138

Security Affairs

MAY 18, 2020

Security experts discovered a highly sophisticated Android spyware platform, dubbed Mandrake, that remained undetected for four years. Researchers from Bitdefender discovered a high-sophisticated Android spyware platform dubbed Mandrake, it was involved in highly targeted attacks against specific devices. Pierluigi Paganini.

Spyware 99

Spyware Malware Advertising Banking 99

The Hacker News

AUGUST 1, 2023

The spyware is distributed through email phishing or smishing campaigns and the fraudulent activities are executed with a combination of remote access trojan (RAT) capabilities and vishing attack," Italian cybersecurity

Banking 89

Banking Spyware Phishing Cybersecurity 89

The Hacker News

JULY 31, 2023

Organizations in Italy are the target of a new phishing campaign that leverages a new strain of malware called WikiLoader with an ultimate aim to install a banking trojan, stealer, and spyware called Ursnif (aka Gozi). "It

Banking 85

Banking Spyware Phishing Malware 85

Malwarebytes

AUGUST 18, 2022

Phishing attacks are a persistent threat to businesses globally. According to Verizon , 82 percent of data breaches in 2021 involved the human element—with phishing attacks making up over 60 precent of these. With Malwarebytes DNS filtering , however, you can prevent a large swath of phishing attacks.

DNS 62

DNS Phishing Small Business Spyware 62

SecureList

FEBRUARY 9, 2022

Our Anti-Phishing system blocked 253 365 212 phishing links. Safe Messaging blocked 341 954 attempts to follow phishing links in messengers. Hurry up and lose your account: phishing in the corporate sector. Another noticeable phishing trend targeting the corporate sector was to exploit popular cloud services as bait.

Phishing 65

Phishing Scams Accountability Banking 65

BH Consulting

OCTOBER 6, 2022

Is it just us, or is phishing everywhere right now? Social engineering techniques, such as phishing, target not the systems but the people using them. Social engineering techniques, such as phishing, target not the systems but the people using them. An emotional phish . spyware, ransomware).”.

Security Awareness 52

Security Awareness Phishing Scams Social Engineering 52

Threatpost

SEPTEMBER 9, 2020

Malware can take over common device functions as well as creates a phishing page to steal Facebook credentials.

Spyware 104

Spyware Phishing Malware Mobile 104

Security Affairs

JULY 18, 2019

The researchers attribute the spyware to the Russia-linked and Gamaredon Group. The attack starts with spear-phishing emails containing weaponized attachments, the malware is distributed via Russian hosting providers. The post Experts spotted a rare Linux Desktop spyware dubbed EvilGnome appeared first on Security Affairs.

Spyware 90

Spyware Malware Advertising Cyber Attacks 90

Adam Levin

NOVEMBER 26, 2019

Using the information and accesses exposed, they could create effective phishing campaigns, or target companies with various forms of malicious software attacks: malware, spyware, ransomware, and more,” the article continued.

B2B 295

B2B Spyware VPN Phishing 295

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 95

Spyware Hacking Malware Social Engineering 95

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC. Automotive Industry Chinese Organized Crime’s Latest U.S.

Data breaches 103

Data breaches Phishing Ransomware Malware 103

Zero Day

MARCH 24, 2022

The malware is being spread through an interesting phishing tactic.

Spyware 127

Spyware Phishing Malware 127

SecureList

SEPTEMBER 8, 2022

Southern Europe leads the ranking of regions by percentage of ICS computers on which malicious email attachments and phishing links were blocked. Regions ranked by percentage of ICS computers on which malicious email attachments and phishing links were blocked, H1 2022. Spyware was blocked on 6% of ICS computers.

Spyware 84

Spyware Cryptocurrency Phishing Ransomware 84

SecureList

DECEMBER 16, 2021

In June 2021, Kaspersky ICS CERT experts identified malware whose loader has some similarities to the Manuscrypt malware, which is part of the Lazarus APT group’s arsenal. In 2020, the group used Manuscrypt in attacks on defense enterprises in different countries.

Spyware 94

Spyware Energy and Utilities Malware VPN 94

Threatpost

JANUARY 31, 2022

Finland is weathering a bout of Pegasus infections, along with a Facebook Messenger phishing scam.

Spyware 67

Spyware Scams Phishing Mobile 67

Threatpost

OCTOBER 5, 2018

A spyware attack on a Saudi dissident living in Canada made headlines this week, but Citizen Lab warns that simpler attacks are the real epidemic.

Spyware 60

Spyware Cyber Attacks Phishing Mobile 60

SecureList

JANUARY 19, 2022

Kaspersky ICS CERT has uncovered a number of spyware campaigns targeting industrial enterprises. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum.

Spyware 76

Spyware Accountability VPN Malware 76

CyberSecurity Insiders

MARCH 16, 2023

But after the spread of the Covid-19 pandemic, the focus of hackers has shifted more towards the smart phones with more phishing and social engineering attacks recorded in a 2nd quarter of 2022. trillion by 2025, and among the guestimate, half of the amount is expected to be made through phishing targeting mobiles and tablets.

Cybercrime 94

Cybercrime Social Engineering Mobile Spyware 94

CSO Magazine

SEPTEMBER 28, 2021

Threat vectors for end-user devices include browser-based attacks, phishing attempts, malicious software, or spyware. Because of the diverse array of attack vectors a variety of protection methods must be leveraged to protect endpoint devices from compromise. To read this article in full, please click here

Antivirus 124

Antivirus CSO Spyware Phishing 124

Security Affairs

APRIL 16, 2019

Scranos is a powerful cross-platform rootkit-enabled spyware discovered while investigating malware posing as legitimate software like video players, drivers and even anti-virus products. The post Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading appeared first on Security Affairs. Pierluigi Paganini.

Spyware 73

Spyware Adware Malware Accountability 73