Lohrman on Security

OCTOBER 1, 2023

Sophisticated social engineering attacks have led to hundreds of data breaches this year. What can be done? And what new resources can help?

Cyber Attacks 302

Cyber Attacks Social Engineering Data breaches Engineering 302

Tech Republic Security

OCTOBER 11, 2023

F5 says an artificial intelligence war could start between generative AI-toting bad actors and enterprises guarding data with AI. Australian IT teams will be caught in the crossfire.

Social Engineering 177

Social Engineering Artificial Intelligence Engineering Risk 177

Penetration Testing

DECEMBER 24, 2024

Researchers Bypass Advanced Encryption with Social Engineering appeared first on Cybersecurity News. Conducted by researchers Kyle Chadee, Wayne Goodridge, and Koffka Khan from the... The post WPA3 Security Cracked?

Social Engineering 91

Social Engineering Engineering Encryption Cybersecurity 91

Schneier on Security

APRIL 22, 2024

Interesting social-engineering attack vector : McAfee released a report on a new LUA malware loader distributed through what appeared to be a legitimate Microsoft GitHub repository for the “C++ Library Manager for Windows, Linux, and MacOS,” known as vcpkg.

Malware 315

Malware Social Engineering Engineering Software 315

Schneier on Security

SEPTEMBER 17, 2024

Interesting social engineering attack: luring potential job applicants with fake recruiting pitches, trying to convince them to download malware.

Malware 275

Malware Social Engineering Engineering Hacking 275

Penetration Testing

DECEMBER 10, 2024

The attacks, attributed to... The post UAC-0185 APT Leverages Social Engineering to Target Ukrainian Defense Industrial Base appeared first on Cybersecurity News.

Social Engineering 104

Social Engineering Engineering Phishing Cybersecurity 104

Schneier on Security

APRIL 2, 2024

Installing it was a multi-year process that seems to have involved social engineering the lone unpaid engineer in charge of the utility. In theory, the code could allow for just about anything, including stealing encryption keys or installing malware. It was an incredibly complex backdoor.

Social Engineering 351

Social Engineering Engineering Software Encryption 351

Joseph Steinberg

OCTOBER 24, 2022

An online cybersecurity event with 2,500 people already logged in had to be cancelled after suspected cybercriminals launched a social engineering attack in the event’s chat window.

Cybersecurity 360

Cybersecurity Social Engineering Artificial Intelligence Scams 360

Krebs on Security

AUGUST 21, 2020

” The perpetrators focus on social engineering new hires at the targeted company, and impersonate staff at the target company’s IT helpdesk. The agencies said crooks use the vished VPN credentials to mine the victim company databases for their customers’ personal information to leverage in other attacks.

VPN 362

VPN Social Engineering Authentication Engineering 362

Tech Republic Security

FEBRUARY 26, 2024

Identity-based and social engineering attacks still take center stage, according to the CrowdStrike 2024 Global Threat Report.

Threat Reports 172

Threat Reports Social Engineering Engineering Phishing 172

Krebs on Security

OCTOBER 20, 2023

In both cases, the attackers managed to social engineer employees into resetting the multi-factor login requirements for Okta administrator accounts. In March 2022, Okta disclosed a breach from the hacking group LAPSUS$, a criminal hacking group that specialized in social-engineering employees at targeted companies.

Social Engineering 328

Social Engineering Engineering Accountability Hacking 328

Tech Republic Security

AUGUST 23, 2024

A new malware called NGate allows cybercriminals to steal near field communication data from Android phones via sophisticated social engineering. The data is relayed to the fraudsters before being used to steal cash.

Social Engineering 202

Social Engineering Malware Engineering Banking 202

Tech Republic Security

JANUARY 9, 2025

Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure use of open-source software in 2025.

Software 166

Software Social Engineering Engineering Artificial Intelligence 166

Tech Republic Security

DECEMBER 3, 2024

The exposed database creates opportunities for staging convincing phishing and social engineering attacks, among other issues.

Social Engineering 188

Social Engineering Engineering Phishing Cybersecurity 188

Krebs on Security

FEBRUARY 26, 2023

GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee.

Hacking 308

Hacking Social Engineering Phishing Scams 308

Schneier on Security

SEPTEMBER 17, 2020

The only way to protect against BLURtooth attacks is to control the environment in which Bluetooth devices are paired, in order to prevent man-in-the-middle attacks, or pairings with rogue devices carried out via social engineering (tricking the human operator). However, patches are expected to be available at one point.

Authentication 363

Authentication Social Engineering Firmware Encryption 363

Krebs on Security

AUGUST 19, 2020

Allen said a typical voice phishing or “vishing” attack by this group involves at least two perpetrators: One who is social engineering the target over the phone, and another co-conspirator who takes any credentials entered at the phishing page and quickly uses them to log in to the target company’s VPN platform in real-time.

Phishing 360

Phishing VPN Social Engineering Media 360

Krebs on Security

NOVEMBER 21, 2020

In response to questions from KrebsOnSecurity, GoDaddy acknowledged that “a small number” of customer domain names had been modified after a “limited” number of GoDaddy employees fell for a social engineering scam. GoDaddy said the outage between 7:00 p.m. and 11:00 p.m. PST on Nov.

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

Krebs on Security

JANUARY 7, 2025

Each participant in the call has a specific role, including: -The Caller: The person speaking and trying to social engineer the target. A tutorial shared by Stotle titled “Social Engineering Script” includes a number of tips for scam callers that can help establish trust or a rapport with their prey.

Phishing 327

Phishing Cryptocurrency Accountability Social Engineering 327

The Last Watchdog

NOVEMBER 19, 2023

Using routine social engineering strategies, the cyber-thieves gathered information about key employees. Professional networking and social media platforms continue to prove a rich landscape for phone numbers, locations, hobbies, dates of birth, family members, and friendships.

Social Engineering 310

Social Engineering Passwords Authentication Marketing 310

Joseph Steinberg

FEBRUARY 11, 2021

Perhaps even scarier is the possibility that, if you share a photo of your vaccine card, a criminal may use the information to social engineer you (or a family member, co-worker, etc.)

Media 363

Media Artificial Intelligence Social Engineering Manufacturing 363

Krebs on Security

APRIL 6, 2022

The actors used social engineering techniques and, in some cases, posed as members of the victim company’s IT help desk, using their knowledge of the employee’s personally identifiable information—including name, position, duration at company, and home address—to gain the trust of the targeted employee.” ” SMASH & GRAB.

Social Engineering 276

Social Engineering Phishing Engineering Accountability 276

The Hacker News

DECEMBER 17, 2024

A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate. "An

Social Engineering 118

Social Engineering Malware Engineering 118

Schneier on Security

DECEMBER 20, 2022

The installer was left on various torrent sites, presumably ensnaring people downloading pirated copies of the operating system: Mandiant uncovered a socially engineered supply chain operation focused on Ukrainian government entities that leveraged trojanized ISO files masquerading as legitimate Windows 10 Operating System installers.

Social Engineering 210

Social Engineering Engineering Software Government 210

Krebs on Security

MARCH 23, 2022

Microsoft says LAPSUS$ — which it boringly calls “ DEV-0537 ” — mostly gains illicit access to targets via “social engineering.” ” This involves bribing or tricking employees at the target organization or at its myriad partners, such as customer support call centers and help desks.

Social Engineering 326

Social Engineering Accountability Mobile Passwords 326

The Last Watchdog

APRIL 2, 2024

It’s a digital swindle as old as the internet itself, and yet, as the data tells us, the vast majority of security incidents are still rooted in the low-tech art of social engineering. Some 74 percent of cyber breaches are caused by human factors, including errors, stolen credentials, misuse of access privileges, or social engineering.

Social Engineering 211

Social Engineering Technology Engineering Accountability 211

Penetration Testing

APRIL 17, 2024

McAfee Labs researchers have uncovered a dangerous new variant of the Redline Stealer malware that uses clever obfuscation tactics and aggressive social engineering to trick victims and evade detection.

Penetration Testing 143

Penetration Testing Malware Social Engineering Engineering 143

Krebs on Security

DECEMBER 29, 2020

In almost every category — from epic breaches and ransomware to cybercrime justice and increasingly aggressive phishing and social engineering scams — 2020 was a year that truly went to eleven. But it was hardly a dull one for computer security news junkies.

Scams 282

Scams Social Engineering Cybercrime Advertising 282

The Hacker News

JULY 29, 2024

This campaign heavily relies on social engineering tactics to deceive users into executing a PowerShell script, thereby compromising their systems," Trellix security researcher Rafael Pena said in a Monday analysis. The cybersecurity

Phishing 141

Phishing Social Engineering Scams Engineering 141

Security Boulevard

DECEMBER 5, 2024

Identity phishing doesn’t just lead to data theft – it can also lead to financial fraud, targeted social engineering attacks and lateral movement across endpoints. The post Identity Phishing: Using Legitimate Cloud Services to Steal User Access appeared first on Security Boulevard.

Phishing 111

Phishing Social Engineering Engineering Security Awareness 111

Krebs on Security

APRIL 11, 2023

This could be via social engineering, spear phishing attacks, or exploitation of other services.” This makes it extremely enticing for attackers as they don’t need to socially engineer their way into an organization.

Social Engineering 273

Social Engineering Ransomware Internet Internet 273

Security Boulevard

SEPTEMBER 9, 2024

The rise in sophisticated phishing threats like polymorphic attacks, social engineering tactics, and the use of compromised accounts have undoubtedly highlighted the significant gaps in perimeter technology, leading to a notable increase in bypassed attacks.

Phishing 121

Phishing Social Engineering Engineering Accountability 121

The Hacker News

DECEMBER 27, 2024

Contagious Interview (aka DeceptiveDevelopment) refers to a persistent attack campaign that employs social engineering lures, with the hacking crew often posing as recruiters to trick individuals looking for potential job opportunities into

Social Engineering 120

Social Engineering Malware Engineering Hacking 120

Krebs on Security

JANUARY 30, 2024

2022 that an intrusion had exposed a “limited number” of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials. Twilio disclosed in Aug. Sosa also was active in a particularly destructive group of accomplished criminal SIM-swappers known as “ Star Fraud.”

Social Engineering 339

Social Engineering Mobile Passwords Cybercrime 339

Security Boulevard

SEPTEMBER 16, 2024

As digital exploitation, fraud and deception move deeper into society, it is incumbent on organizations to educate their employees on digital literacy skills, make them aware of the risks posed by phishing and social engineering threats.

Social Engineering 118

Social Engineering Education Engineering Phishing 118

The Hacker News

DECEMBER 2, 2024

These PUP (potentially unwanted programs) applications use social engineering tactics to trick users into providing sensitive information and granting extra mobile app permissions, which

Social Engineering 134

Social Engineering Malware Mobile Engineering 134

Joseph Steinberg

NOVEMBER 1, 2023

In terms of offering human beings the capability to communicate unbounded by language and culture, AI is already enabling criminals who might otherwise be constrained by their knowledge of a particular language or set of languages to social engineer people who speak other languages.

Artificial Intelligence 169

Artificial Intelligence Social Engineering Engineering Phishing 169