Tag: phishing
-
HMRC phishing breach wholly avoidable, but hard to stop
A breach at HMRC saw innocent taxpayers tricked into letting scammers impersonate them through simple phishing attacks leading to account takeover. Such attacks are avoidable, but hard to stop. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625364/HMRC-phishing-breach-wholly-avoidable-but-hard-to-stop
-
Salesforce, Okta Targeted by Telephone-Wielding Hackers
Hackers Impersonate IT Support Staff. A hacking collective linked to recent British retailer attacks is targeting cloud companies through or voice phishing scams for data theft from European hospitality, retail and education sectors. Hackers impersonate IT support staff. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/salesforce-okta-targeted-by-telephone-wielding-hackers-a-28604
-
Beware of Fake Zoom Client Downloads Granting Attackers Access to Your Computer
In the wake of the COVID-19 pandemic, collaborative tools like Microsoft Teams, Zoom, and WebEx have become indispensable for remote work, enabling seamless communication with colleagues and clients. However, their widespread adoption has also made them prime targets for cybercriminals. A recent phishing campaign exploiting the popularity of Zoom has surfaced, tricking users into downloading…
-
Outdoor-Shop Unterwegs von Cyberattacke betroffen
Der Händler für Outdoor-Ausrüstung Unterwegs wurde gehackt. Dabei sind möglicherweise Kundendaten abgeflossen.Der Unterwegs Outdoor Shop wurde nach eigenen Angaben Ende Mai Ziel einer Cyberattacke. Wie aus einem Rundschreiben an die Kunden hervorgeht, konnten die Angreifer dabei potenziell Zugriff auf Kundendaten erlangen. ‘Aufgrund unserer Erkenntnisse aus den Untersuchungen des Vorfalls können wir leider nicht ausschließen, dass…
-
Hackers Exploit New HTML Trick to Deceive Outlook Users into Clicking Malicious Links
Cybersecurity researchers have encountered a cleverly crafted phishing email targeting Czech bank customers, employing a lesser-known but highly deceptive technique to bypass security mechanisms and trick users into clicking malicious links. At first glance, the email appears to be a standard phishing attempt, masquerading as a legitimate message from a Czech bank and urging recipients…
-
830 Organizations Hacked via Glitch-hosted Phishing Attack Uses Telegram Fake CAPTCHAs
Netskope Threat Labs reported a staggering 3.32-fold increase in traffic to phishing pages hosted on the Glitch platform, a browser-based web development tool that allows users to create and deploy web apps with free subdomains. This alarming spike has impacted over 830 organizations and more than 3,000 users, with Navy Federal Credit Union members being…
-
UNC6040 APT Hackers Steals Salesforce data Without Exploit Any Vulnerabilities
Tags: apt, cyber, cyberattack, data, exploit, google, group, hacker, intelligence, phishing, software, threat, vulnerabilityThe financially motivated threat cluster UNC6040, tracked by Google Threat Intelligence Group (GTIG), has been orchestrating a series of voice phishing (vishing) campaigns specifically aimed at compromising Salesforce environments of multinational corporations. Unlike traditional cyberattacks that leverage software vulnerabilities, UNC6040 relies entirely on manipulating human behavior, impersonating IT support personnel to deceive employees predominantly in…
-
Outlook Users Targeted by New HTML-Based Phishing Scheme
A recent phishing campaign has revealed a sophisticated technique that exploits Microsoft Outlook’s unique handling of HTML emails to conceal malicious links from corporate users. The attack, initially appearing as a standard phishing attempt impersonating a Czech bank, leverages conditional HTML comments to display different content depending on the email client used to open the…
-
What the Arc Browser Story Reveals About the Future of Browser Security
By Dakshitaa Babu, Security Researcher, SquareX In a candid letter that Joshua Miller, CEO of Arc Browser, wrote to the community, he revealed a truth the tech industry has been dancing around: “the dominant operating system on desktop wasn’t Windows or macOS anymore”Š”, “Šit was the browser.” The evidence is everywhere”Š”, “Šcloud revenue surging year…
-
100,000 UK taxpayer accounts hit in £47m phishing attack on HMRC
MPs on Treasury committee hear that those affected were being contacted and would face ‘no financial loss’HM Revenue & Customs has lost £47m after a phishing scam breached tens of thousands of tax accounts, a group of MPs has heard.Two senior civil servants at the tax authority told the Treasury committee that 100,000 people had…
-
Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App
Google has disclosed details of a financially motivated threat cluster that it said “specialises” in voice phishing (aka vishing) campaigns designed to breach organizations’ Salesforce instances for large-scale data theft and subsequent extortion.The tech giant’s threat intelligence team is tracking the activity under the moniker UNC6040, which it said exhibits characteristics that align with First…
-
Hackers abuse malicious version of Salesforce tool for data theft, extortion
A threat group is using voice phishing to trick targeted organizations into sharing sensitive credentials. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/hackers-abuse-salesforce-tool-extortion/749790/
-
Beware of Device Code Phishing
Hackers are exploiting trusted authentication flows, like Microsoft Teams and IoT logins, to trick users into handing over access tokens, bypassing MFA and slipping undetected into corporate networks. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/beware-device-code-phishing
-
Phishing Campaign Uses Fake Booking.com Emails to Deliver Malware
A phishing campaign spoofing Booking.com has been observed targeting hospitality sector, using ClickFix to install malware First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/phishing-fake-bookingcom-emails/
-
APT37 Hackers Fake Academic Forum Invites to Deliver Malicious LNK Files via Dropbox Platform
The North Korean state-sponsored hacking group APT37 has launched a sophisticated spear phishing campaign in March 2025, targeting activists focused on North Korean issues. Disguised as invitations to an academic forum hosted by a South Korean national security think tank, these emails cleverly referenced a real event titled “Trump 2.0 Era: Prospects and South Korea’s…
-
Dobrindt will aufrüsten gegen Cyberkriminelle
Tags: ai, cyberattack, cybercrime, dark-web, germany, international, Internet, phishing, ransomware, service, toolBundesinnenminister Alexander Dobrindt will stärker gegen Cyberkriminalität vorgehen.Bundesinnenminister Alexander Dobrindt (CSU) hat Maßnahmen angekündigt, um Cyberkriminalität künftig effektiver bekämpfen zu können. “Wir rüsten massiv auf: rechtlich, technisch und organisatorisch”, sagte er bei der Vorstellung des Bundeslagebilds Cybercrime 2024 des Bundeskriminalamt (BKA) .Konkret gehe es dabei um mehr Befugnisse für die Sicherheitsbehörden sowie höhere Sicherheitsstandards in…
-
In The News – ManagedMethods Helps K-12 Schools With Launch of Advanced Phishing AI Solution
View the original press release on Newswire. ManagedMethods introduces first chain-of-thought (CoT) detection tool for K-12 schools BOULDER, Colo., June 3, 2025 (Newswire.com) ManagedMethods, the leading provider of Google Workspace and Microsoft 365 cybersecurity, student safety, and compliance for K-12 school districts, today announces the launch of its Advanced Phishing solution to enhance its core…
-
Interlock and the Kettering Ransomware Attack: ClickFix’s Persistence
Tags: access, attack, breach, captcha, ciso, computer, control, credentials, cyberattack, data, data-breach, detection, endpoint, exploit, group, healthcare, HIPAA, incident response, injection, malicious, mobile, network, phishing, powershell, ransom, ransomware, risk, saas, service, technology, threat, tool, vulnerabilityIn healthcare, every minute of downtime isn’t just a technical problem”Š”, “Šit’s a patient safety risk. CNN recently reported that Kettering Health, a major hospital network in Ohio, was hit by a ransomware attack. According to CNN, the Interlock ransomware group claimed responsibility, sending a chilling reminder that healthcare remains a prime target for this particular…
-
Steuer-Phishing zur Abgabefrist
Cyberkriminelle nutzen saisonale Ereignisse gerne aus die Steuersaison bildet da keine Ausnahme. Sie nutzen den erhöhten Stress, die knappen Fristen und die sensiblen Finanzdaten, um sich Zugang zu sensiblen Daten zu verschaffen. Angesichts der bevorstehenden Fristen in den USA und der EU beobachtete das Team von Threat Labs im März 2025 einen Anstieg der […]…
-
Scattered Spider: Three things the news doesn’t tell you
Scattered Spider isn’t one group, it’s an identity-first threat model evolving fast. From vishing to AiTM phishing, they’re exploiting MFA gaps to hijack the cloud. Watch the Push Security webinar to learn how their identity-based tactics work, and how to stop them. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/scattered-spider-three-things-the-news-doesnt-tell-you/
-
Erhöhte Phishing Angriffe zur Steuersaison
Mindestens genauso wichtig ist die Vorbereitung der Mitarbeitenden. Regelmäßige, praxisnahe Schulungen helfen, betrügerische Mails schneller zu erkennen und angemessen darauf zu reagieren. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/erhoehte-phishing-angriffe-zur-steuersaison/a41015/
-
Security Awareness Trainings: Dringender Bedarf angesichts zunehmender Cyberbedrohungen in Europa insbesondere Phishing
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/phishing-security-awareness-trainings
-
Bling slinger Cartier tells customers to be wary of phishing attacks after intrusion
Nothing terribly valuable taken in data heist, though privacy a little tarnished First seen on theregister.com Jump to article: www.theregister.com/2025/06/03/cartier_attack_data_theft/
-
ThreatPlattformen ein Kaufratgeber
Tags: ai, attack, automation, breach, cisa, cloud, crowdstrike, cyber, cyberattack, dark-web, deep-fake, dns, edr, exploit, finance, firewall, gartner, identity, incident response, intelligence, mail, malware, monitoring, network, open-source, phishing, risk, siem, soar, soc, threat, tool, vulnerability, zero-dayThreat-Intelligence-Plattformen erleichtern es, Bedrohungen zu durchdringen und wirksame Abwehrmaßnahmen zu ergreifen.Der erste Schritt zu einem soliden Enterprise-Security-Programm besteht darin, eine geeignete Threat-Intelligence-Plattform (TIP) auszuwählen. Fehlt eine solche Plattform, haben die meisten Security-Teams keine Möglichkeit, Tool-Komponenten miteinander zu integrieren und angemessene Taktiken und Prozesse zu entwickeln, um Netzwerke, Server, Applikationen und Endpunkte abzusichern. Aktuelle Bedrohungstrends machen…
-
Activity of Haozi phishing service surging, report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/activity-of-haozi-phishing-service-surging-report-finds
-
CFOs Targeted in Sophisticated Phishing Campaign Using Legit NetBird Tool
CFOs are being targeted in a global phishing campaign using the legit NetBird tool to stealthily take control of devices, Trellix researchers warn. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/cfos-targeted-phishing-campaign-netbird/
-
How Artificial Intelligence Phishing Detection Is Reshaping K12 Email Protection
Using Artificial Intelligence Phishing Detection to Outsmart Today’s Email Threats in K12 Phishing emails are no longer riddled with spelling mistakes and shady links. Today’s threats are socially engineered, personalized, and increasingly difficult to detect”, especially in school environments where staff and students rely heavily on email for daily communication. But there’s good news: artificial…