Tag: phishing
-
How Artificial Intelligence Phishing Detection Is Reshaping K12 Email Protection
Using Artificial Intelligence Phishing Detection to Outsmart Today’s Email Threats in K12 Phishing emails are no longer riddled with spelling mistakes and shady links. Today’s threats are socially engineered, personalized, and increasingly difficult to detect”, especially in school environments where staff and students rely heavily on email for daily communication. But there’s good news: artificial…
-
Haozi’s PlugPlay Phishing Attack Steals Over $280,000 From Users
Netcraft security researchers have identified a significant resurgence of the Chinese-language Haozi Phishing-as-a-Service (PhaaS) operation, distinguished by its cartoon mouse mascot and frictionless cybercrime toolkit. The group’s cryptocurrency wallet has processed over $280,000, with substantial recent withdrawals, while thousands of their administration panels have been detected across the internet. What makes Haozi particularly dangerous is…
-
Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions
Cybersecurity researchers have warned of a new spear-phishing campaign that uses a legitimate remote access tool called Netbird to target Chief Financial Officers (CFOs) and financial executives at banks, energy companies, insurers, and investment firms across Europe, Africa, Canada, the Middle East, and South Asia. “In what appears to be a multi-stage phishing operation, the…
-
Wie Hardware-Sicherheitsschlüssel gegen Phishing helfen – Ohne Phishing-resistente Nutzer geht nichts!
First seen on security-insider.de Jump to article: www.security-insider.de/phishing-angriffe-sicherheit-durch-resistente-authentifizierung-a-3dc5c16235038243c1f752fb9679f6b3/
-
Adobe und Microsoft sind bei Cloud-Phishing die beliebtesten Marken
Der Bericht Research Report EUROPA von Netskope Threat Labs deckt auf, dass Phishing zur bevorzugten Methode von Angreifern geworden ist, um Sicherheitskontrollen zu umgehen und auf sensible Umgebungen in Europa zuzugreifen. Die Forscher des Sicherheits- und Netzwerkunternehmens berichten, dass Adobe die Marke ist, die am häufigsten von Cyberkriminellen imitiert wird. Sie taucht in fast einem……
-
KnowBe4 gibt praktische Tipps für den Datenschutz in der Urlaubszeit
Ob Phishing-Mails im Urlaubslook, unsichere WLAN-Verbindungen oder anfällige mobile Geräte: Die Bedrohungslage für Reisende hat sich weiterentwickelt. Umso wichtiger ist es, vorbereitet zu sein. KnowBe4 gibt sieben einfache, aber wirkungsvolle Empfehlungen, wie man sich und seine Daten auf Reisen schützen kann: First seen on infopoint-security.de Jump to article: www.infopoint-security.de/knowbe4-gibt-praktische-tipps-fuer-den-datenschutz-in-der-urlaubszeit/a40980/
-
KI-gesteuerte Scams definieren die Cyberkriminalität neu
Der Verlust persönlicher Daten, Phishing-Berichte, gefälschte Browser-Updates und Scam-Yourself-Angriffe nehmen stetig zu. Gen, ein Unternehmen, das sich mit einer Familie von Marken wie Norton, Avast, MoneyLion und anderen für digitale Freiheit einsetzt, veröffentlichte seinen Q1/2025 Gen Threat Report [1]. Dieser beleuchtet die wichtigsten Veränderungen in der globalen Cybersicherheitslandschaft zwischen Januar und März 2025. Zu… First…
-
FBI Report: Beinahe 200.000 Phishing-Angriffe die Methoden
Mir ist im Mai 2025 eine Auswertung zum neuesten FBI Internet Crime Report zugegangen. Dort findet sich die Aussage, dass Phishing, mit über 193.000 Beschwerden in 2024, nach wie vor die häufigste Bedrohung durch Internetkriminalität in den USA darstellt. Nicht … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/31/fbi-report-beinahe-200-000-phishing-angriffe-die-methoden/
-
PureHVNC RAT distributed via job lures in new phishing attack
First seen on scworld.com Jump to article: www.scworld.com/brief/purehvnc-rat-distributed-via-job-lures-in-new-phishing-attack
-
NetBird malware spread in advanced finance exec-targeted spear-phishing
First seen on scworld.com Jump to article: www.scworld.com/brief/netbird-malware-spread-in-advanced-finance-exec-targeted-spear-phishing
-
Global phishing campaign powered by Nifty infrastructure
First seen on scworld.com Jump to article: www.scworld.com/brief/global-phishing-campaign-powered-by-nifty-infrastructure
-
Credential phishing facilitated by Google Apps Script exploitation
First seen on scworld.com Jump to article: www.scworld.com/brief/credential-phishing-facilitated-by-google-apps-script-exploitation
-
A Hacker May Have Deepfaked Trump’s Chief of Staff in a Phishing Campaign
Plus: An Iranian man pleads guilty to a Baltimore ransomware attack, Russia’s nuclear blueprints get leaked, a Texas sheriff uses license plate readers to track a woman who got an abortion, and more. First seen on wired.com Jump to article: www.wired.com/story/trump-chief-staff-susie-wiles-hacker-phishing-impersonation/
-
Threat Actors Exploit Google Apps Script to Host Phishing Sites
The Cofense Phishing Defense Center has uncovered a highly strategic phishing campaign that leverages Google Apps Script a legitimate development platform within Google’s ecosystem to host deceptive phishing pages. This attack, masquerading as an invoice email, exploits the inherent trust users place in Google’s trusted environment to trick recipients into divulging sensitive information. A Sophisticated…
-
Dadsec Hacker Group Uses Tycoon2FA Infrastructure to Steal Office365 Credentials
Tags: credentials, cyber, cybersecurity, group, hacker, infrastructure, intelligence, microsoft, phishing, service, threatCybersecurity researchers from Trustwave’s Threat Intelligence Team have uncovered a large-scale phishing campaign orchestrated by the notorious hacker group Storm-1575, also known as >>Dadsec.
-
Microsoft Reveals Techniques for Defending Against Evolving AiTM Attacks
Tags: attack, authentication, cloud, credentials, cyber, data-breach, email, microsoft, phishing, threatMicrosoft has exposed the escalating sophistication of phishing attacks, particularly focusing on Adversary-in-the-Middle (AiTM) techniques that are becoming a cornerstone of modern cyber threats. As organizations increasingly adopt multifactor authentication (MFA), passwordless solutions, and robust email protections, threat actors are adapting with advanced methods to steal credentials, especially targeting enterprise cloud environments. AiTM attacks, often…
-
Nach Datenleck – Auf Adidas-Kunden kommen Spam und Phishing zu
First seen on security-insider.de Jump to article: www.security-insider.de/datenleck-adidas-informationen-betroffene-kunden-a-7c65a098de97739d8a87b195ea9f6858/
-
Chinese Phishing Service Haozi Resurfaces, Fueling Criminal Profits
A Chinese-language PhaaS platform Haozi is making cybercrime easy with no tech skills needed. Discover how this plug-and-play service facilitated over $280,000 in illicit transactions. First seen on hackread.com Jump to article: hackread.com/chinese-phishing-service-haozi-criminal-profits/
-
Void Blizzard nimmt NATO-Organisationen ins Visier
Tags: access, api, authentication, blizzard, cloud, cyberattack, cyberespionage, edr, fido, framework, governance, government, hacker, intelligence, mail, malware, mfa, microsoft, open-source, passkey, password, phishing, risk, siem, spear-phishing, threat, tool, ukraineRussische Hacker ändern ihre Taktik von Passwort-Spraying zu Phishing, aber ihre Ziele innerhalb der NATO bleiben gleich.Seit über einem Jahr hat es eine neue Cyberspionage-Gruppe, die mit der russischen Regierung in Verbindung stehen soll, auf Unternehmen aus verschiedenen Branchen innerhalb der NATO abgesehen. Die Gruppe wird von Microsoft Threat Intelligence ‘Void Blizzard” genannt. Die niederländischen…
-
Safari Flaw Exploited by BitM Attack to Steal User Login Data
A new wave of phishing attacks, known as Fullscreen Browser-in-the-Middle (BitM) attacks, is exploiting browser features to steal user credentials with unprecedented stealth. Unlike traditional phishing, which relies on fake websites and visible clues, BitM attacks leverage remote browser sessions and the Fullscreen API to create convincing overlays that mask all browser interface elements, including…
-
Using AI to outsmart AI-driven phishing scams
Phishing scams used to be filled with awkward wording and obvious grammar mistakes. Not anymore. AI is now making it harder to distinguish what is real. According to Cofense, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/30/ai-phishing-defense/
-
Warning: Threat actors now abusing Google Apps Script in phishing attacks
script[.]google[.]com. The attacker is betting the user will see and trust the Google brand, and therefore trust the content.”By using a trusted platform to host the phishing page, the threat actor creates a false sense of security, obscuring the underlying threat with the goal of getting the recipient to enter their email and password without…
-
Threat Actors Exploit Nifty[.]com Infrastructure in Sophisticated Phishing Attack
Threat actors have orchestrated a multi-wave phishing campaign between April and May 2025, leveraging the legitimate infrastructure of Nifty[.]com, a prominent Japanese Internet Service Provider (ISP), to execute their attacks. Uncovered by Raven, a leading threat detection entity, this operation stands out due to its ability to evade conventional email security systems by abusing trusted…
-
Threat actors abuse Google Apps Script in evasive phishing attacks
Threat actors are abusing the trusted Google platform ‘Google Apps Script’ to host phishing pages, making them appear legitimate and eliminating the risk of them getting flagged by security tools. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/threat-actors-abuse-google-apps-script-in-evasive-phishing-attacks/