Tag: phishing
-
Fake DigiYatra Apps Target Indian Users to Steal Financial Data
Threat actors have been exploiting the trust in India’s digital public infrastructure by setting up a deceptive phishing site, digiyatra[.]in, impersonating the DigiYatra Foundation. This fraudulent website, still live at the time of reporting, is being used to harvest personal user data by presenting itself as an official service for air travelers. Data Harvesting The…
-
Gezielte Phishing-Kampagne nutzt Google AppSheet aus
Die Angreifer nutzen AppSheet eigentlich ein legitimer Google-Dienst für automatisierte Arbeitsabläufe um massenhaft Phishing-Mails zu versenden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/gezielte-phishing-kampagne-nutzt-google-appsheet-aus/a40927/
-
Phishing-Kampagne tarnt sich als Meta mit Hilfe vertrauenswürdiger Plattformen wie Appsheet
Seit März 2025 hat das Team von KnowBe4 Defend einen Anstieg von Phishing-Angriffen beobachtet, die die Appsheet-Plattform von Google ausnutzen, um eine sehr gezielte und ausgeklügelte Kampagne zu starten. Dabei geben sich die Angreifer als der Social-Media-Plattformriese Meta aus. Die Angreifer nutzen dabei hochmoderne Taktiken wie polymorphe Identifikatoren, fortschrittliche Man-in-the-Middle-Proxy-Mechanismen und Techniken zur Umgehung der…
-
Over 40 Malicious Chrome Extensions Impersonate Popular Brands to Steal Sensitive Data
Tags: browser, chrome, cyber, cybersecurity, data, google, intelligence, malicious, phishing, tacticsCybersecurity firm LayerX has uncovered over 40 malicious Chrome browser extensions, many of which are still available on the Google Chrome Web Store. These extensions, part of three distinct phishing campaigns, were designed to impersonate well-known and trusted applications and brands. Detailed Analysis Reveals Impersonation Tactics LayerX, building off initial research by the DomainTools Intelligence…
-
QR-Code-Phishing: Wenn der Scan zur Falle wird
QR-Code-Phishing wird zunehmend zur Gefahr für Privatpersonen und Unternehmen. Cyberkriminelle nutzen manipulierte Codes, um Daten zu stehlen oder Geräte zu kompromittieren. Wer die Risiken kennt und Schutzmaßnahmen trifft, kann sich wirksam davor schützen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/qr-code-phishing-scan-falle
-
FBI Warns of Silent Ransom Group Targeting Law Firms via Scam Calls
FBI warns law firms: Silent Ransom Group uses phishing emails and fake IT calls to steal data, demanding ransom to prevent public leaks. The agency is also urges victims to share ransom evidence. First seen on hackread.com Jump to article: hackread.com/fbi-silent-ransom-group-law-firms-via-scam-calls/
-
Mal wieder IONOS EKonten-Phishing
Kleine Erinnerung für Nutzer von Postfächern beim Anbieter IONOS. Die letzten Tage hatte ich wieder einige Phishing-Mails in meinem SPAM-Ordner, die suggerierten, dass etwas mit meinen Postfächern sei und zur Anmeldung aufforderten. Aufgefallen ist mir dies eigentlich nur, weil diese … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/25/mal-wieder-ionos-e-mail-konten-phishing/
-
How Hunters International Used the Browser to Breach Enterprises”Š”, “ŠAnd Why They Didn’t See It”¦
How Hunters International Used the Browser to Breach Enterprises”Š”, “ŠAnd Why They Didn’t See It Coming At RSAC 2025, Cato Networks delivered a presentation that SOC teams and CISOs will want to pay attention to: “Suspicious Minds”Š”, “ŠHunting Threats That Don’t Trigger Security Alerts.” The session showcased ransomware campaigns that bypassed traditional detection. In some cases,…
-
Volksversand: Große Versandapotheke informiert Kunden über Datenleck
Wer schon einmal bei der Versandapotheke Volksversand bestellt hat, sollte sich vor Phishing-Mails in Acht nehmen. Es sind wohl Daten abgeflossen. First seen on golem.de Jump to article: www.golem.de/news/volksversand-grosse-versandapotheke-informiert-kunden-ueber-datenleck-2505-196520.html
-
Russian APT28 compromised Western logistics and IT firms to track aid to Ukraine
Tags: access, advisory, api, authentication, cctv, cloud, computer, container, credentials, cve, cybersecurity, data, detection, email, exploit, flaw, government, hacker, identity, infrastructure, Internet, login, malicious, malware, mfa, military, network, ntlm, office, open-source, password, phishing, powershell, russia, service, software, threat, tool, ukraine, vulnerabilityCredential guessing and spearphishing: The attackers used brute-force credential guessing techniques, also known as password spraying, to gain initial access to accounts. This was complemented with targeted phishing emails that directed recipients to fake login pages for government entities or Western cloud email providers. These phishing pages were stored on free web hosting services or…
-
Russian Threat Actor TAG-110 Goes Phishing in Tajikistan
While Ukraine remains Russia’s major target for cyberattacks, TAG-110 is part of a strategy to preserve a post-Soviet sphere of influence by embedding itself in other countries’ infrastructures. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/russian-threat-actor-tag-110-phishing-tajikistan
-
Russia-aligned hackers target Tajikistan in new espionage campaign
The hackers used phishing emails containing government-themed lure documents to gain access to targeted systems. First seen on therecord.media Jump to article: therecord.media/russia-hackers-target-tajikistan-espionage
-
Law Enforcement, Microsoft Disrupt Operations of Popular Lumma Stealer
International law enforcement agencies and cybersecurity vendors seized thousands of domains used to run the MaaS operations of the widely popular Lumma Stealer malware, which was used to facilitate ransomware, malvertising, and phishing attacks around the globa. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/law-enforcement-microsoft-disrupt-operations-of-popular-lumma-stealer/
-
Cybercriminals Using Trusted Google Domains to Spread Malicious Code
A sophisticated new malvertising scheme has emerged, transforming trusted e-commerce websites into phishing traps without the knowledge of site owners or advertisers. Cybercriminals are exploiting integrations with Google APIs, specifically through JSONP (JSON with Padding) calls, to inject malicious scripts into legitimate online stores. These scripts operate covertly, redirecting unsuspecting shoppers to fraudulent payment pages…
-
SideWinder APT Caught Spying on India’s Neighbor Gov’ts
A recent spear-phishing campaign against countries in South Asia aligns with broader political tensions in the region. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/sidewinder-apt-spying-indias-neighbor-govts
-
Russische Cyber-Kampagne in Nato-Staaten aufgedeckt
Westliche Geheimdienste haben eine Cyber-Kampagne Russlands aufgedeckt, die gegen logistische und technologische Ziele in Nato-Staaten gerichtet ist. Wie das britische National Cyber Security Centre mitteilte, soll die Einheit 26165 des russischen Geheimdienstes GRU seit 2022 eine Kampagne gegen staatliche und private Organisationen durchgeführt haben. Dabei sollen auch solche ins Visier geraten sein, die mit der Koordination…
-
Hackers Target Mobile Users Using PWA JavaScript to Bypass Browser Security
A sophisticated new injection campaign has been uncovered, targeting mobile users through malicious third-party JavaScript to deliver a Chinese adult-content Progressive Web App (PWA) scam. This attack, which redirects users to sites like hxxps://xjdm166[.]com, leverages the unique capabilities of PWAs to retain users longer and evade traditional browser security mechanisms. Unlike typical phishing attempts, this…
-
PureRAT Malware Spikes 4x in 2025, Deploying PureLogs to Target Russian Firms
Russian organizations have become the target of a phishing campaign that distributes malware called PureRAT, according to new findings from Kaspersky.”The campaign aimed at Russian business began back in March 2023, but in the first third of 2025 the number of attacks quadrupled compared to the same period in 2024,” the cybersecurity vendor said.The attack…
-
Neue Angriffstaktiken: Die trügerische Sicherheit von MFA
Multi-Faktor-Authentifizierung (MFA) galt lange als das Bollwerk gegen Phishing-Attacken effektiv, kostengünstig und leicht zu implementieren. Doch aktuelle Entwicklungen zeigen: Diese Schutzmaßnahme ist längst nicht mehr unangreifbar. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/die-truegerische-sicherheit-mfa
-
New Phishing Attack Uses AES Malicious npm Packages to Office 365 Login Credentials
Fortra’s Suspicious Email Analysis (SEA) team uncovered a highly sophisticated phishing campaign targeting Microsoft Office 365 (O365) credentials. Unlike typical phishing attempts, this attack stood out due to its intricate use of modern technologies and developer infrastructure. The threat actors employed a multi-layered strategy involving AES (Advanced Encryption Standard) encryption, malicious npm (Node Package Manager)…
-
Geldwäsche 2.0 Wie Cyberkriminelle ihre Millionen legalisieren
Sie tarnen sich als Investoren, gründen Start-ups und betreiben Restaurants doch das Kapital stammt aus Ransomware, Phishing und Datenklau. Eine neue Analyse zeigt: Cyberkriminelle investieren gezielt in reale Geschäftsmodelle und unterwandern die Wirtschaft mit digital erbeuteten Millionen. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/geldwaesche-2-0-wie-cyberkriminelle-ihre-millionen-legalisieren/
-
Threat intelligence platform buyer’s guide: Top vendors, selection advice
Tags: ai, attack, automation, breach, cloud, computing, credentials, crowdstrike, cyber, cybersecurity, dark-web, data, data-breach, deep-fake, detection, dns, edr, email, endpoint, exploit, finance, firewall, fraud, gartner, google, group, guide, identity, incident response, infrastructure, intelligence, kubernetes, law, malicious, malware, microsoft, mitigation, monitoring, network, open-source, phishing, privacy, risk, service, siem, soar, soc, sophos, sql, supply-chain, technology, threat, tool, vpn, vulnerability, zero-dayThe Cybersecurity and Infrastructure Security Agency (CISA) found that since 2023 the majority of exploits were zero days, meaning exploiting heretofore unknown methods. And according to the latest Verizon Data Breach Investigations report (DBIR), the percentage of AI-assisted malicious emails doubled to 10% of the totals they observed over the past two years, making staying…
-
Abgriff persönlicher Daten: Phishing-Welle attackiert Steuerzahler in Deutschland
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/daten-phishing-steuerzahler-deutschland
-
Novel Phishing Attack Combines AES With Poisoned npm Packages
Researchers discovered a phishing attack in the wild that takes multiple well-tread technologies like open source packages and AES encryption and combines them. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/novel-phishing-attack-combines-aes-npm-packages