Tag: phishing
-
Sparkasse haftet für Phishing-Schaden trotz grober Fahrlässigkeit urteilt OLG Dresden
Tags: phishingSparkasse haftet für Phishing-Schaden trotz grober Fahrlässigkeit des Kunden OLG Dresden sieht Mitverschulden. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/rechtssachen/sparkasse-haftet-fuer-phishing-schaden-trotz-grober-fahrlaessigkeit-urteilt-olg-dresden-317762.html
-
Over 500 Scattered Spider Phishing Domains Poised to Target Multiple Industries
Check Point discovered around 500 suspected Scattered Spider phishing domains, suggesting the group is preparing to expand its targeting First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/scattered-spider-phishing-domains/
-
Infostealers-as-a-Service Push Identity Hacks to Record Highs
Identity-based cyberattacks soar 156%, driven by cheap Phishing-as-a-Service infostealer malware. Learn how criminals bypass MFA to steal credentials, access bank accounts, and compromise business emails. First seen on hackread.com Jump to article: hackread.com/infostealers-as-a-service-identity-hacks-record-highs/
-
Pakistan’s Transparent Tribe Hits Indian Defence with Linux Malware
Pakistan’s APT36 Transparent Tribe uses phishing and Linux malware to target Indian defence systems running BOSS Linux says Cyfirma. First seen on hackread.com Jump to article: hackread.com/pakistan-transparent-tribe-indian-defence-linux-malware/
-
New Batavia spyware targets Russian industrial enterprises
Since March 2025, fake contract emails have been spreading Batavia spyware in targeted attacks on Russian organizations. Since March 2025, a targeted phishing campaign against Russian organizations has used fake contract-themed emails to spread the Batavia spyware, a new malware designed to steal internal documents. The attack, ongoing since July 2024, begins with links to…
-
‘Batavia’ Windows spyware campaign targets dozens of Russian orgs
A previously undocumented spyware called ‘Batavia’ has been targeting large industrial enterprises in Russia in a phishing email campaign that uses contract-related lures. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/batavia-windows-spyware-campaign-targets-dozens-of-russian-orgs/
-
Batavia Spyware Targets Employees via Weaponized Word Documents Delivering Malware Payloads
Batavia, an unidentified spyware, has been using a sophisticated phishing operation to target Russian industrial organizations since July 2024. Kaspersky researchers have identified a sharp rise in detections since early March 2025, with over 100 users across dozens of organizations falling prey to bait emails disguised as contract agreements. These emails, often containing file names…
-
Over 1,000 Fake Domains Imitating Amazon Prime Day Created to Target Online Shoppers
Online customers around the world are getting ready for huge discounts and unique offers as July 8, the much-anticipated Amazon Prime Day 2025, draws near. However, this global shopping event has also become a prime target for cybercriminals, with over 1,000 newly registered domains mimicking Amazon’s branding detected in June alone. Surge in Phishing Threats…
-
Phishing platforms, infostealers blamed as identity attacks soar
Get your creds in order or risk BEC, ransomware attacks, orgs warned First seen on theregister.com Jump to article: www.theregister.com/2025/07/07/phishing_platforms_infostealers_blamed_for/
-
New Phishing Attack Impersonates DWP to Steal Credit Card Information from Users
A sophisticated phishing campaign targeting UK residents has been active since late May 2025, with a significant surge in activity during the second half of June. This malicious operation impersonates the Department for Work and Pensions (DWP), a key UK government body responsible for welfare and pension services, by sending fraudulent SMS messages to unsuspecting…
-
North Korea-linked threat actors spread macOS NimDoor malware via fake Zoom updates
North Korea-linked hackers use fake Zoom updates to spread macOS NimDoor malware, targeting crypto firms with stealthy backdoors. North Korea-linked threat actors are targeting Web3 and crypto firms with NimDoor, a rare macOS backdoor disguised as a fake Zoom update. Victims are tricked into installing the malware through phishing links sent via Calendly or Telegram.…
-
Betrug zum Prime Day: Deutsche Amazon-Seite für Phishing imitiert
Cyberkriminelle haben das Login-Fenster des Online-Händlers für Datendiebstahl nachgeahmt. Zudem hat Check Point Research rund 1.000 bösartige Domains im Zusammenhang mit Amazon entdeckt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/betrug-zum-prime-day
-
Massive spike in use of .es domains for phishing abuse
¡Cuidado! Time to double-check before entering your Microsoft creds First seen on theregister.com Jump to article: www.theregister.com/2025/07/05/spain_domains_phishing/
-
Scattered Spider Enhances Tactics to Exploit Legitimate Tools for Evasion and Persistence
Scattered Spider, also tracked under aliases such as UNC3944, Scatter Swine, and Muddled Libra, has emerged as a formidable financially motivated cybercriminal group since at least May 2022. Initially known for targeting telecommunications and tech firms with phishing and SIM-swapping campaigns, the group has significantly evolved, orchestrating full-spectrum, multi-stage intrusions across both cloud and on-premises…
-
Accelerated phishing site creation facilitated by Vercel’s AI tool
First seen on scworld.com Jump to article: www.scworld.com/brief/accelerated-phishing-site-creation-facilitated-by-vercels-ai-tool
-
New callback phishing involves brand impersonating PDFs
Tags: phishingFirst seen on scworld.com Jump to article: www.scworld.com/brief/new-callback-phishing-involves-brand-impersonating-pdfs
-
Incorrect links output by LLMs could lead to phishing, researchers say
First seen on scworld.com Jump to article: www.scworld.com/news/incorrect-links-output-by-llms-could-lead-to-phishing-researchers-say
-
Hallucinations May Open LLMs to Phishing Threats
First seen on scworld.com Jump to article: www.scworld.com/news/hallucinations-may-open-llms-to-phishing-threats
-
New Fake Marketplace From China Mimics Top Retail Brands for Fraud
Silent Push exposes thousands of fake e-commerce websites spoofing major brands like Apple and Michael Kors. Learn how this Chinese phishing scam targets shoppers and steals financial data, impacting global consumers. First seen on hackread.com Jump to article: hackread.com/china-fake-marketplace-mimics-top-retail-brands-fraud/
-
Beware of Fake Chinese E-Commerce Sites Imitating Apple, Wrangler, and Exploiting Payment Services like MasterCard and PayPal
A sophisticated phishing campaign, initially spotlighted by Mexican journalist Ignacio Gómez Villaseñor, has evolved into a sprawling global threat, as revealed by Silent Push Threat Analysts. What began as a targeted attack on Spanish-language audiences during Mexico’s “Hot Sale 2025” an annual sales event akin to Black Friday has expanded into a massive fake marketplace…
-
Deutsche Amazon-Seite für Phishing imitiert Check Point warnt vor Betrug zum Prime-Day
Check Point Research, die IT-Forensikabteilung von Check Point Software Technologies warnt vor Betrugsversuchen rund um den Amazon-Prime-Day am 8. Juli. Die Sicherheitsforscher haben allein im Juni über 1.000 Domains entdeckt, die der von Amazon ähnlich sind und 87 Prozent davon als gefährlich oder bösartig eingestuft. Zu den Funden von CPR gehörten auch täuschend echt gefälschte…
-
Threat Actors Exploit .COM TLD to Host Widespread Credential Phishing Sites
Threat actors have dramatically increased their exploitation of the cybersecurity sector, which is a disturbing development. Spain’s country code TLD, ES, is used to plan credential phishing attacks. According to recent findings from Cofense Intelligence, the abuse of .ES TLD domains surged by an astonishing 19-fold from Q4 2024 to Q1 2025, propelling it to…
-
Criminals Sending QR Codes in Phishing, Malware Campaigns
The Anti-Phishing Working Group observed how attackers are increasingly abusing QR codes to conduct phishing attacks or to trick users into downloading malware. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/criminals-send-qr-codes-phishing
-
You can’t trust AI chatbots not to serve you phishing pages, malicious downloads, or bad code
Popular AI chatbots powered by large language models (LLMs) often fail to provide accurate information on any topic, but researchers expect threat actors to ramp up their … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/03/you-cant-trust-ai-chatbots-not-to-serve-you-phishing-pages-malicious-downloads-or-bad-code/
-
Attackers Impersonate Top Brands in Callback Phishing
Microsoft, PayPal, Docusign, and others are among the trusted brands threat actors use in socially engineered scams that try to get victims to call adversary-controlled phone numbers. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/attackers-top-brands-callback-phishing
-
AI Tools Like GPT, Perplexity Misleading Users to Phishing Sites
A new wave of cyber risk is emerging as AI-powered tools like ChatGPT and Perplexity become default search and answer engines for millions. Recent research by Netcraft has revealed that these large language models (LLMs) are not just making innocent mistakes”, they are actively putting users at risk by recommending phishing sites and non-brand domains…
-
ChatGPT creates phisher’s paradise by recommending the wrong URLs for major companies
Crims have cottoned on to a new way to lead you astray First seen on theregister.com Jump to article: www.theregister.com/2025/07/03/ai_phishing_websites/
-
Russian APT ‘Gamaredon’ Hits Ukraine With Fierce Phishing
A Russian APT known as Gamaredon is using spear-phishing attacks and network-drive weaponization to target government entities in Ukraine. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-apt-gamaredon-ukraine-phishing