Tag: phishing
-
Phishing-Angreifer setzen zunehmen auf russische Bullet-Proof-Domains
Zwischen Dezember 2024 und Januar 2025 haben Forscher des KnowBe4 Threat Labs einen 98-prozentigen Anstieg von Phishing-Kampagnen festgestellt, die über russische Top-Level-Domains (TLDs) gehostet wurden. Das Besondere daran: betrieben werden diese Domains von so genannten “šbullet-proof’ Domain-Hosts. Sie sind dafür bekannt, gemeldete bösartige Webseiten, die für Phishing-Angriffe missbraucht werden, weiterlaufen zu lassen und Missbrauchsmeldungen zu…
-
Morphing Meerkat phishing kits exploit DNS MX records
Morphing Meerkat phishing kits exploit DNS MX records to deliver spoofed login pages, targeting over 100 brands. Infoblox researchers discovered a new phishing-as-a-service (PhaaS) platform that generated multiple phishing kits, called Morphing Meerkat, using DNS mail exchange (MX) records to deliver fake login pages and targeting over 100 brands. Threat actors are exploiting DNS techniques…
-
Hackers Distributing Phishing Malware Via SVG Format To Bypass File Detection
Cybersecurity experts at the AhnLab Security Intelligence Center (ASEC) have uncovered a novel phishing malware distribution method leveraging the Scalable Vector Graphics (SVG) file format to bypass detection mechanisms. SVG, an XML-based vector image format widely used for icons, logos, charts, and graphs, enables the embedding of CSS and JavaScript scripts. However, attackers are now…
-
Russia-Linked Gamaredon Uses Troop-Related Lures to Deploy Remcos RAT in Ukraine
Entities in Ukraine have been targeted as part of a phishing campaign designed to distribute a remote access trojan called Remcos RAT.”The file names use Russian words related to the movement of troops in Ukraine as a lure,” Cisco Talos researcher Guilherme Venere said in a report published last week. “The PowerShell downloader contacts geo-fenced…
-
Russian Intelligence Impersonates CIA in Phishing Attacks
Silent Push Threat Analysts uncover a multi-cluster phishing operation leveraging fake CIA and anti-Putin group websites to harvest First seen on securityonline.info Jump to article: securityonline.info/russian-intelligence-impersonates-cia-in-phishing-attacks/
-
Von Smishing bis Whaling: 9 Arten von Phishing-Angriffen, die ihr kennen solltet
First seen on t3n.de Jump to article: t3n.de/news/smishing-bis-whaling-neun-arten-von-phishing-angriffen-1679869/
-
Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft’s new AI agents take on phishing, patching, alert fatigue Microsoft … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/30/week-in-review-chrome-sandbox-escape-0-day-fixed-microsoft-adds-new-ai-agents-to-security-copilot/
-
Lucid: The Rising Threat of Phishing-as-a-Service
In the ever-evolving landscape of cyber threats, Phishing-as-a-Service (PhAAS) platforms have emerged as a significant concern, enabling cybercriminals First seen on securityonline.info Jump to article: securityonline.info/lucid-the-rising-threat-of-phishing-as-a-service/
-
Gamaredon Hackers Weaponize LNK Files to Deliver Remcos Backdoor
Cisco Talos has uncovered an ongoing cyber campaign by the Gamaredon threat actor group, targeting Ukrainian users with malicious LNK files to deliver the Remcos backdoor. Active since at least November 2024, this campaign employs spear-phishing tactics, leveraging themes related to the Ukraine conflict to lure victims into executing the malicious files. The LNK files,…
-
Babuk Locker 2.0 vs Seceon Platform: MITRE ATTCK Mapping and Early-Stage Detection Remediation
Overview of Babuk Locker 2.0 Babuk Locker 2.0 is a ransomware strain that employs double extortion, where attackers encrypt victim files and exfiltrate sensitive data for ransom. It targets organizations by exploiting RDP vulnerabilities, unpatched systems, weak credentials, and phishing attacks. MITRE ATT&CK Mapping of Babuk Locker 2.0 & Seceon’s Early Detection & Remediation MITRE…
-
4 Tips For Crypto Wallet Security
Cryptocurrency will be more popular in 2025 than it has ever been and this means that there is a greater need for wallet security. As the crypto sector becomes more profitable and popular, malicious actors will look to exploit investors and steal their funds through methods like phishing schemes, wallet hacks, and so on. Then…
-
Gefährlich bequem: So treiben professionelle Phishing-Dienste die Bedrohung in die Höhe
Ein neuer Bericht zeigt: Ransomware-Bedrohungen haben sich im letzten Jahr vervierfacht vor allem durch den Boom krimineller Ransomware-as-a-Service-Angebote. Auch Phishing-Attacken nehmen wieder deutlich zu, ebenfalls angetrieben durch diese ‘Cybercrime-as-a-Service”-Modelle. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/gefaehrlich-bequem-so-treiben-professionelle-phishing-dienste-die-bedrohung-in-die-hoehe/
-
Phishing-Alarm: Microsoft Word erzeugt PDF-Phishing-Link
Mir ist von einem Blog-Leser eine sehr krude Geschichte zugespielt worden. Ein mit Microsoft Word erzeugtes Dokument enthielt eine WebEx-Einladung. Durch die Silbentrennung wurde ein “Phishing-Link” erzeugt, der auf obskure Seiten umleitete. Später stellte sich heraus, dass die PDF-Konverter die … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/29/phishing-alarm-microsoft-word-erzeugt-pdf-phishing-link/
-
After Chrome patches zero-day used to target Russians, Firefox splats similar bug
Single click on a phishing link in Google browser blew up sandbox on Windows First seen on theregister.com Jump to article: www.theregister.com/2025/03/28/google_kaspersky_mozilla/
-
AI-enabled phishing and fake worker attacks on the rise
First seen on scworld.com Jump to article: www.scworld.com/news/ai-enabled-phishing-and-fake-worker-attacks-on-the-rise
-
New Morphing Meerkat Phishing Kit Exploits DNS to Spoof 100+ Brands
A recent analysis published by Infoblox reveals a sophisticated phishing operation, dubbed Morphing Meerkat, actively exploiting DNS vulnerabilities… First seen on hackread.com Jump to article: hackread.com/morphing-meerkat-phishing-kit-dns-spoof-brands/
-
Russian Phishing Uses Fake CIA Sites to Target Anti-war, Ukraine Supporters
The phishing campaign is highly sophisticated! First seen on hackread.com Jump to article: hackread.com/russia-phishing-fake-cia-sites-anti-war-ukraine-supporters/
-
Morphing Meerkat Phishing Kits Target Over 100 Brands
A threat actor tracked as Morphing Meerkat abuses DNS mail exchange (MX) records to deliver spoofed login pages. The post Morphing Meerkat Phishing Kits Target Over 100 Brands appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/morphing-meerkat-phishing-kits-target-over-100-brands/
-
Crooks are reviving the Grandoreiro banking trojan
Grandoreiro Banking Trojan resurfaces, targeting users in Latin America and Europe in new phishing campaigns. Forcepoint X-Labs researchers warn of new phishing campaigns targeting Latin America and Europe in new phishing campaigns. The Trojan has been active since 2016, it initially targeted Brazil but expanded to Mexico, Portugal, and Spain since 2020. Grandoreiro is amodular…
-
Tax Season = Prime Time for Scammers, Here’s How to Stay Safe
Tax season has arrived, and so have the scammers. As W-2 forms pile up and calculators come out, scammers start circling like sharks in shallow water. From bogus IRS messages to sneaky links designed to swipe your refund (and identity), phishing scams are ramping up. Cybersecurity experts urge the taxpayers to stay sharp and […]…
-
New ‘Lucid’ Phishing Platform Abuses iMessage, Android RCS to Slip Past Defenses
A sophisticated cybercrime service known as >>Lucid
-
Phishing-as-a-service operation uses DNS-over-HTTPS for evasion
A newly discovered phishing-as-a-service (PhaaS) operation that researchers call Morphing Meerkat, has been using the DNS over HTTPS (DoH) protocol to evade detection. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phishing-as-a-service-operation-uses-dns-over-https-for-evasion/
-
Russian Hackers Impersonate CIA to Steal Ukrainian Defense Intelligence Data
In a complex cyber operation discovered by Silent Push Threat Analysts, Russian hackers have launched a multi-pronged phishing campaign impersonating various organizations, including the CIA, to gather intelligence on individuals sympathetic to Ukraine’s defense efforts. The campaign, believed to be orchestrated by Russian Intelligence Services or aligned actors, utilizes a network of fraudulent websites to…
-
Warum es gerade so viele Beschwerden über die ADAC-Kreditkarte gibt
First seen on t3n.de Jump to article: t3n.de/news/beschwerden-adac-kreditkarte-1680244/
-
Microsoft Teams Phishing Attacks: What to Know and What to Do
First seen on scworld.com Jump to article: www.scworld.com/perspective/microsoft-teams-phishing-attacks-what-to-know-and-what-to-do
-
Mailchimp phishing exposes Have I Been Pwned subscribers
Tags: phishingFirst seen on scworld.com Jump to article: www.scworld.com/brief/mailchimp-phishing-exposes-have-i-been-pwned-subscribers
-
CISOs’ Challenge: Securing MFA Adoption With Risk Messaging
Tags: ai, authentication, business, ciso, compliance, cyber, mfa, phishing, risk, tactics, vulnerabilityAICD’s Figueroa on Business-Focused Communication for Authentication Progress. Modern phishing tactics now leverage voice, SMS and AI-powered impersonation, yet many Asia-Pacific organizations continue relying on vulnerable single-factor authentication, said Marco Figueroa, senior manager of cyber security, risk and compliance at the Australian Institute of Company Directors. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisos-challenge-securing-mfa-adoption-risk-messaging-a-27848
-
Famous Data Breaches Phishing Attacks: What We Can Learn
Explore major data breaches and phishing attacks, their impact, and key lessons. Learn how companies fell victim and how to protect against such threats. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/famous-data-breaches-phishing-attacks-what-we-can-learn/
-
New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records
Cybersecurity researchers have shed light on a new phishing-as-a-service (PhaaS) platform that leverages the Domain Name System (DNS) mail exchange (MX) records to serve fake login pages that impersonate about 114 brands.DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishing kit, and the related activity under the moniker Morphing Meerkat.”The threat…