Collecting Cyber-News from over 60 sources

Tag: phishing

Unmasking ECH: Why DNSthe-Root-of-Trust Holds the Key to Secure Connectivity

May 29, 2025 3:55 PM

Tags: cisa, data, detection, dns, encryption, endpoint, Internet, network, phishing, privacy, risk, strategy, tool, vulnerability

Encrypted Client Hello (ECH) has been in the news a lot lately. For some background and relevant and recent content, see: IETF Proposed Standard Cloudflare Blog from 2023 announcing ECH support RSA 2025 talk: ECH: Hello to Enhanced Privacy or Goodbye to Visibility? Corrata White Paper “Living with ECH” Security Now podcast coverage of the…
New Browser Exploit Technique Undermines Phishing Detection

May 29, 2025 3:55 PM

Tags: attack, detection, exploit, malicious, phishing

Fullscreen Browser-in-the-Middle attacks are making it harder for users to detect malicious websites First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/browser-exploit-technique/
‘Haozi’ Gang Sells Turnkey Phishing Tools to Amateurs

May 29, 2025 12:55 PM

Tags: group, infrastructure, phishing, service, tool

The phishing operation is using Telegram groups to sell a phishing-as-a-service kit with customer service, a mascot, and infrastructure that requires little technical knowledge to install. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/haozi-gang-sells-turnkey-phishing-tools-amateurs
New Spear-Phishing Campaign Targets Financial Executives with NetBird Malware

May 29, 2025 11:55 AM

Tags: banking, cyber, email, finance, insurance, malware, middle-east, phishing, social-engineering, spear-phishing

Trellix’s email security systems detected a highly targeted spear-phishing campaign aimed at CFOs and finance executives across industries like banking, energy, insurance, and investment firms in regions spanning Europe, Africa, Canada, the Middle East, and South Asia. This meticulously crafted operation, uncovered by Trellix’s Advanced Research Center, leverages social engineering to impersonate a Rothschild &…
6 rising malware trends every security pro should know

May 29, 2025 8:55 AM

Tags: adobe, ai, antivirus, apple, attack, awareness, backdoor, business, captcha, cloud, corporate, cybercrime, data, defense, detection, encryption, endpoint, exploit, extortion, framework, group, hacking, incident response, infrastructure, intelligence, Internet, law, leak, macOS, malicious, malware, network, password, phishing, powershell, programming, pypi, ransom, ransomware, service, social-engineering, software, supply-chain, tactics, theft, threat, tool, update, vulnerability, worm

Malicious packages targeting developer environments: Threat actors are systematically compromising the software supply chain by embedding malicious code within legitimate development tools, libraries, and frameworks that organizations use to build applications.”These supply chain attacks exploit the trust between developers and package repositories,” Immersive’s McCarthy tells CSO. “Malicious packages often mimic legitimate ones while running harmful…
Phishing Q1 2025: Neue Angriffsmuster und technische Schwachstellen

May 29, 2025 7:55 AM

Tags: cyberattack, phishing, ransomware, vulnerability

Im ersten Quartal 2025 zeigen sich klare Trends in der Cyberkriminalität. Phishing bleibt die häufigste Angriffsform, während gleichzeitig Ransomware-Angriffe zunehmen insbesondere in der Fertigungs- und Baubranche. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/phishing-angriffsmuster-schwachstellen
Microsoft Phishing mit MS 365-Tenants?

May 29, 2025 12:55 AM

Tags: mail, microsoft, phishing

Ich stelle mal eine Mail zur Diskussion, die ich angeblich von Microsoft bezüglich eines “auslaufenden Tenants” bekommen habe. Es soll was bestellt werden, da der seit mehr als 200 Tage inaktive Tenant sonst ausläuft. Ist es eine legitime Mail oder … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/29/microsoft-phishing-mit-ms-365-tenants/
Instagram Boss Warns of ‘Sophisticated’ Google Phishing Scam

May 28, 2025 9:55 PM

Tags: google, phishing, scam

Instagram head Adam Mosseri nearly fell for a convincing phishing scam posing as Google. Learn how attackers use real domains”, and how to stay safe. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/instagram-boss-google-phishing/
The latest in phishing scams: stealing your information through fake online forms

May 28, 2025 3:55 PM

Tags: attack, cybercrime, exploit, phishing, scam, tactics, technology, threat
SilentWerewolf Attack Combines Legitimate Tools with Code Obfuscation for Stealthy Infiltration

May 28, 2025 2:55 PM

Tags: attack, cyber, email, malicious, phishing, russia, threat, tool

The threat actor dubbed SilentWerewolf has employed advanced phishing techniques to infiltrate organizations in Russia and Moldova, focusing on critical sectors such as nuclear energy, aircraft, and mechanical engineering. Starting on March 11, the first campaign used spearphishing emails with malicious links to distribute ZIP archives containing a novel C# loader disguised as legal documents.…
Emerging FormBook Malware Threatens Windows Users with Complete System Takeover

May 28, 2025 2:55 PM

Tags: control, cyber, cybersecurity, email, exploit, malware, microsoft, phishing, risk, threat, windows

A critical cybersecurity threat has surfaced targeting Microsoft Windows users, as detailed in the latest analysis of the FormBook malware. Documented in Part II of a comprehensive FormBook analysis blog, this malware variant poses a severe risk by enabling attackers to gain full remote control over a victim’s computer. Initially delivered through phishing emails exploiting…
New Phishing Campaign Uses DBatLoader to Drop Remcos RAT: What Analysts Need to Know

May 28, 2025 11:55 AM

Tags: phishing, rat

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings. First seen on hackread.com Jump to article: hackread.com/new-phishing-campaign-dbatloader-drop-remcos-rat/
‘Secure email’: A losing battle CISOs must give up

May 28, 2025 10:55 AM

Tags: access, attack, authentication, business, cisco, ciso, communications, compliance, corporate, credentials, cyber, cybercrime, data, dkim, dmarc, dns, email, encryption, finance, google, Internet, mail, mfa, microsoft, mobile, password, phishing, risk, service, threat, tool, windows

End-to-end encryption remains elusive: Email continues to be the dominant electronic communication tool today because it is well understood, relatively easy to use, and relatively inexpensive. By and large, businesses have approved email for sending confidential information, and we often convince ourselves that it is secure, can be secured with third-party tools, or it’s “good…
Will AI agent-fueled attacks force CISOs to fast-track passwordless projects?

May 28, 2025 8:54 AM

Tags: access, ai, api, attack, authentication, breach, business, ciso, cloud, credentials, cyber, cybersecurity, data, fido, finance, framework, google, Hardware, identity, login, metric, microsoft, okta, passkey, password, phishing, privacy, risk, risk-management, service, technology, threat, tool, update, zero-trust

Passwordless options: In retiring passwords, security leaders will need to consider their options, passkeys, biometrics, and third-party login services, looking for the best technical, usability, and security fit. There are pros and cons for each option, and in many cases CISOs may be guided towards one based on their existing environment.Passkeys, used by Microsoft, Samsung,…
GitHub becomes go-to platform for malware delivery across Europe

May 28, 2025 6:54 AM

Tags: access, control, github, malware, phishing

Phishing has become the go-to method for attackers looking to get past security controls and access sensitive environments in Europe, according to Netskope. Users are now … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/28/attackers-phishing-method-europe/
New Russian APT group Void Blizzard targets NATO-based orgs after infiltrating Dutch police

May 28, 2025 1:55 AM

Tags: access, api, apt, attack, authentication, blizzard, cloud, credentials, data, defense, detection, edr, email, fido, framework, group, hacker, identity, least-privilege, login, mfa, microsoft, open-source, passkey, password, phishing, qr, risk, russia, siem, spear-phishing, switch, threat, tool

Switch to spear phishing: In recent months the group seems to have pivoted from password spraying to targeted spear phishing attacks that direct users to fake Microsoft Entra login pages using adversary-in-the-middle (AitM) techniques. Such a campaign led to the compromise of 20 NGOs in April.In its campaign against NGOs, Void Blizzard sent emails masquerading…
AI in K-12 Cybersecurity: Hype or Helpful?

May 27, 2025 9:54 PM

Tags: ai, cybersecurity, intelligence, phishing, ransomware, risk, threat, tool

Not all AI is created equal. Here’s how cybersecurity AI actually helps defend your district. From predictive grading tools to personalized learning platforms, artificial intelligence (AI) is quickly making its mark in K-12 education. But what about cybersecurity? With rising threats like phishing and ransomware putting schools at risk, AI-powered K-12 cybersecurity solutions are being…
Adidas customers’ personal information at risk after data breach

May 27, 2025 8:54 PM

Tags: attack, breach, cyber, data, data-breach, phishing, risk

Lovers of Adidas clothes would be wise to be on their guard against phishing attacks, after the German sportswear giant revealed that a cyber attack had exposed the personal information of customers. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/adidas-customers-personal-information-at-risk-after-data-breach
FBI Warns Law Firms: Hackers Are Calling Offices in Stealth Phishing Scam

May 27, 2025 7:54 PM

Tags: access, hacker, law, office, phishing, scam, tool

The FBI warns law firms of a stealth phishing scam where hackers call victims, pose as IT staff, and use remote access tools to steal sensitive data. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/fbi-warns-luna-moth/
Threat Actors Use Fake DocuSign Notifications to Steal Corporate Data

May 27, 2025 5:54 PM

Tags: corporate, credentials, cyber, data, phishing, threat

DocuSign has emerged as a cornerstone for over 1.6 million customers worldwide, including 95% of Fortune 500 companies, and boasts a user base exceeding one billion. However, this widespread adoption has made DocuSign a prime target for cybercriminals. Leveraging the platform’s trusted reputation, threat actors are increasingly deploying sophisticated phishing campaigns to harvest corporate credentials,…
Hackers Use Fake OneNote Login to Capture Office365 and Outlook Credentials

May 27, 2025 3:54 PM

Tags: attack, cloud, credentials, cyber, data, google, hacker, login, phishing, service

A recent investigation by security analysts has uncovered a persistent phishing campaign targeting Italian and U.S. users, utilizing a chain of free cloud platforms and Telegram bots for credential harvesting and data exfiltration. The attack typically begins with a phishing page hosted on services like Notion or Google Docs, masquerading as legitimate portals such as…
Wer landet im Netz der Cyber-Spinne?

May 27, 2025 3:54 PM

Tags: awareness, backup, ciso, cyber, cyberattack, edr, google, hacker, infrastructure, intelligence, login, malware, mfa, phishing, ransomware, service, social-engineering, tool, usa, vpn

Nachdem die Hackergruppe Scattered Spider unter britischen Einzelhändlern gewütet hat, verstärkt sie ihre Kooperation mit RaaS und weitet ihr Jagdgebiet aus.Der britische Einzelhändler Marks & Spencer wurde Ende April durch eine Cyberattacke erheblich in seinem Geschäftsbetrieb gestört. Voraussichtlicher Schaden: über 400 Millionen Dollar. Kurz darauf ereigneten sich ähnliche Angriffe auf die Einzelhändler Harrods und Co-op.Alle…
Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra Pages

May 27, 2025 2:54 PM

Tags: blizzard, breach, cloud, espionage, government, group, hacker, hacking, microsoft, phishing, russia, threat

Microsoft has shed light on a previously undocumented cluster of threat activity originating from a Russia-affiliated threat actor dubbed Void Blizzard (aka Laundry Bear) that it said is attributed to “worldwide cloud abuse.”Active since at least April 2024, the hacking group is linked to espionage operations mainly targeting organizations that are important to Russian government…
AI, Quantum and the Evolving Threat Landscape: Key Findings from the Thales 2025 Data Threat Report

May 27, 2025 1:54 PM

Tags: ai, api, attack, authentication, awareness, breach, cloud, compliance, computing, control, crypto, cryptography, data, encryption, guide, malicious, malware, mfa, nist, passkey, phishing, privacy, programming, ransomware, regulation, risk, software, strategy, threat, tool, vulnerability

AI, Quantum and the Evolving Threat Landscape: Key Findings from the Thales 2025 Data Threat Report madhav Tue, 05/27/2025 – 04:40 The Thales 2025 Data Threat Report reveals a critical inflection point in global cybersecurity. As the threat landscape grows more complex and hostile, the rapid adoption of generative AI is amplifying both opportunity and…
Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moth’s Stealth Phishing Campaign

May 27, 2025 10:54 AM

Tags: access, attack, data, email, extortion, hacker, law, office, phishing, social-engineering, technology

The U.S. Federal Bureau of Investigation (FBI) has warned of social engineering attacks mounted by a criminal extortion actor known as Luna Moth targeting law firms over the past two years.The campaign leverages “information technology (IT) themed social engineering calls, and callback phishing emails, to gain remote access to systems or devices and steal sensitive…
Russia-Linked Hackers Target Tajikistan Government with Weaponized Word Documents

May 27, 2025 9:54 AM

Tags: attack, government, group, hacker, phishing, russia, spear-phishing, threat

The Russia-aligned threat actor known as TAG-110 has been observed conducting a spear-phishing campaign targeting Tajikistan using macro-enabled Word templates as an initial payload.The attack chain is a departure from the threat actor’s previously documented use of an HTML Application (.HTA) loader dubbed HATVIBE, Recorded Future’s Insikt Group said in an analysis.”Given TAG-110’s historical First…
How CISOs can defend against Scattered Spider ransomware attacks

May 27, 2025 8:54 AM

Tags: access, antivirus, attack, backup, ciso, control, credentials, data, defense, detection, edr, exploit, google, group, guide, hacker, hacking, identity, infrastructure, Internet, Intruder, law, mandiant, mfa, network, password, phishing, phone, ransom, ransomware, social-engineering, tactics, threat, tool, vmware, vpn, zero-day

Significant shift to social engineering: Over the past two years, many Scattered Spider members have been arrested and even convicted, including one key member known as “King Bob,” who was arrested in early 2024 and later pleaded guilty to the charges against him. Six other significant Scattered Spider members were arrested in late 2024.Due to…
How Google Meet Pages Are Exploited to Deliver PowerShell Malware

May 27, 2025 8:54 AM

Tags: attack, cyber, cyberattack, email, exploit, google, macOS, malicious, malware, phishing, powershell, social-engineering, tactics, windows

A new wave of cyberattacks exploits user trust in Google Meet by deploying meticulously crafted fake meeting pages that trick victims into running malicious PowerShell commands. This campaign, dubbed ClickFix, leverages advanced social engineering tactics, bypassing traditional security measures and targeting Windows and macOS systems. The attack begins with phishing emails containing links that closely…
Phishing mit Termineinladungen zielt auf Office 365-Konten

May 27, 2025 12:54 AM

Tags: microsoft, office, phishing

Ich greife mal ein Thema auf, welches in der Form irgendwie schon bekannt ist. Besitzer von Microsoft Office 365-Konten erhalten Termineinladungen, die vorgeben, dass eine Aktion durchzuführen ist. Aber im Hintergrund sitzt ein Phisher, der versucht, Opfer über den Tisch … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/27/phishing-mit-termineinladungen-zielt-auf-office-365-konten/
FBI Issues on Silent Ransom Group Using Fake IT Support Calls to Target Victims

May 26, 2025 7:54 PM

Tags: cyber, group, phishing, ransom, threat

The Federal Bureau of Investigation (FBI) has issued a critical alert regarding the escalating activities of the cyber threat actor known as Silent Ransom Group (SRG), also identified under aliases such as Luna Moth, Chatty Spider, and UNC3753. Since emerging in 2022, SRG has gained notoriety for its advanced callback phishing schemes, often posing as…