Tag: phishing
-
Threat Actors Use Fake Booking.com Emails to Deceive Hotel Staff and Gain System Access
A sophisticated phishing campaign targeting the hospitality industry has been uncovered, with threat actors impersonating Booking.com to gain access to hotel systems and customer data. Microsoft Threat Intelligence has attributed the ongoing attacks, which began in December 2024 and continued through February 2025, to a group known as Storm-1865. The campaign primarily targets North America,…
-
Large-Scale Phishing Campaign Targets Defense and Aerospace Companies
A recent investigation by DomainTools Investigations (DTI) has uncovered a massive phishing infrastructure targeting defense and aerospace entities, particularly those linked to the conflict in Ukraine. This sophisticated campaign involves a network of mail servers supporting domains that mimic legitimate organizations, designed to steal critical credentials from employees in these sectors. The infrastructure relies on…
-
Lucid PhAAS Platform Uses RCS and iMessage to Evade Detection
The cybersecurity landscape has been disrupted by the emergence of Lucid, a sophisticated Phishing-as-a-Service (PhAAS) platform developed by Chinese-speaking threat actors. This advanced toolkit enables cybercriminals to conduct large-scale phishing campaigns, targeting 169 entities across 88 countries globally. Lucid’s innovation lies in its exploitation of Rich Communication Services (RCS) and Apple’s iMessage protocol to circumvent…
-
Security Expert Troy Hunt Lured in by Mailchimp Phish
Hunt quickly took to his blog to notify the public of the breach and provide further details on how this could have happened. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/security-expert-troy-hunt-lured-mailchimp-phish
-
Top 3 MS Office Exploits Hackers Use in 2025 Stay Alert!
Hackers have long used Word and Excel documents as delivery vehicles for malware, and in 2025, these tricks are far from outdated. From phishing schemes to zero-click exploits, malicious Office files are still one of the easiest ways into a victim’s system.Here are the top three Microsoft Office-based exploits still making the rounds this year…
-
Passiert auch Profis: Gründer von HaveIBeenPwned fällt auf Phishing-Mail rein
Ein Phisher hat die Mailingliste von Troy Hunt erbeutet. Der Vorfall zeigt eindrucksvoll, dass auch Sicherheitsexperten manchmal unvorsichtig sind. First seen on golem.de Jump to article: www.golem.de/news/passiert-auch-profis-gruender-von-haveibeenpwned-faellt-auf-phishing-mail-rein-2503-194732.html
-
HaveIBeenPwned Creator Becomes Victim of Sophisticated Phishing
Real-world incidents remind us that even cybersecurity experts are not immune to online deception. This time, the case First seen on securityonline.info Jump to article: securityonline.info/haveibeenpwned-creator-becomes-victim-of-sophisticated-phishing/
-
‘Lucid’ Phishing-as-a-Service Exploits Faults in iMessage, Android RCS
Cybercriminals in China have figured out how to undermine the strengths of mobile messaging protocols. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/lucid-phishing-exploits-imessage-android-rcs
-
Even anti-scammers get scammed: security expert Troy Hunt pwned by phishing email
Troy Hunt, creator of the Have I Been Pwned website Troy HuntThe phishing attack was “highly automated and designed to immediately export the list before the victim could take preventative measures,” Hunt wrote.The attack highlights the limitations of passwords and two-factor authentication (2FA) in preventing phishing attacks. Hunt said the incident highlights the need for…
-
KI-Agenten erobern die Cybersicherheitsbranche
Tags: ai, cloud, cyberattack, cyersecurity, edr, governance, identity, intelligence, mail, microsoft, phishing, soar, soc, strategy, threat, tool, update, vulnerabilityMicrosoft führt KI-Agenten ein, um die Cybersicherheit angesichts zunehmender Bedrohungen zu automatisieren.KI-Agenten, die in der Lage sind, Code auszuführen und Websuchen durchzuführen, gewinnen in der gesamten Tech-Branche an Bedeutung. Ein weiteres Feld, welches immer wichtiger wird, ist automatisierte Sicherheit.Diese Tools sind geeignet für Aufgaben wiePhishing-Erkennung,Datenschutz undIdentitätsmanagement.Hierbei handelt es sich um Bereiche, in denen Angreifer unvermindert…
-
If you think you’re immune to phishing attempts, you’re wrong!
Security consultant Troy Hunt, the creator of the Have I Been Pwned (HIBP) service, has revealed that he got tricked by a clever phishing email, and that the attacker gained … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/26/troy-hunt-mailchimp-phishing-email/
-
YouTube Creators Targeted by Weaponized Brand Deals Using ‘Clickflix’ Attack Tactic
A new wave of cyberattacks is targeting YouTube creators, leveraging fake brand collaboration offers to distribute malware. Cybersecurity firm CloudSEK has uncovered a sophisticated phishing campaign that employs the >>Clickflix
-
Google Hastily Patches Chrome Zero-Day Exploited by APT
Researchers at Kaspersky discovered cyber-espionage activity that used the vulnerability in a one-click phishing attack to deliver malware. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/google-patches-chrome-zero-day-exploited-apt
-
APT Hackers Exploit Google Chrome Zero-Day in Operation ForumTroll to Bypass Sandbox Protections
In mid-March 2025, Kaspersky researchers uncovered a sophisticated APT attack, dubbed Operation ForumTroll, which leveraged a previously unknown zero-day exploit in Google Chrome. This exploit allowed attackers to bypass Chrome’s sandbox protections, a critical security feature designed to isolate and contain malicious code. The attack was initiated through personalized phishing emails, which directed victims to…
-
Vorsicht Vishing: Zahl der VoiceAngriffe steigt stark an”‹
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/vishing-voice-phishing-anstieg-report
-
Vorsicht Vishing: Zahl der VoiceAngriffe explodiert
Der Threat Intelligence Report für das zweite Halbjahr 2024 von Ontinue zeigt, dass die Zahl der Ransomware-Attacken erwartungsgemäß weiter stieg, die Lösegeldzahlungen hingegen sanken. Die Vishing-Angriffe explodierten regelrecht [1]. Das ATO (Advanced Threat Operations)-Team von Ontinue hat seinen Halbjahresbericht vorgelegt, in dem es die aktuellen Trends und Entwicklungen im Cybersecurity-Bereich analysiert. Wie zu erwarten war,……
-
Understanding RDAP: The Future of Domain Registration Data Access
Tags: access, api, attack, authentication, china, compliance, control, cyber, cybercrime, cybersecurity, data, detection, exploit, framework, fraud, GDPR, incident response, infrastructure, intelligence, Internet, law, malicious, malware, phishing, privacy, regulation, service, threat, tool, vulnerability -
Cybercriminals Target Gamers with Browserthe-Browser Phishing Attacks
A new phishing campaign employing sophisticated >>browser-in-the-browser
-
After Detecting 30B Phishing Attempts, Microsoft Adds Even More AI to Its Security Copilot
Microsoft is partnering with top firms to launch new AI security tools, boosting breach analysis, threat detection, and AI model protection across cloud platforms. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-ai-agents-security-copilot/
-
New Phishing Campaign Targets Mac Users to Steal Login Credentials
A sophisticated phishing campaign, recently identified by LayerX Labs, has shifted its focus from Windows users to Mac users in response to enhanced security measures implemented by major browsers. Initially, this campaign targeted Windows users by masquerading as Microsoft security alerts, aiming to steal login credentials by creating the illusion of a compromised computer. The…
-
Browserthe-Browser attacks target CS2 players’ Steam accounts
A new phishing campaign targets Counter-Strike 2 players utilizing Browser-in-the-Browser (BitB) attacks that display a realistic window that mimics Steam’s login page. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/browser-in-the-browser-attacks-target-cs2-players-steam-accounts/
-
Microsoft’s new AI agents take on phishing, patching, alert fatigue
Microsoft is rolling out a new generation of AI agents in Security Copilot, built to help with some of the most time-consuming security challenges, such as phishing, data … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/25/microsoft-security-copilot-agents/
-
Microsoft Adds AI Agents to Security Copilot
Microsoft has expanded the capabilities of Security Copilot with AI agents tackling data security, phishing, and identity management. The post Microsoft Adds AI Agents to Security Copilot appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-adds-ai-agents-to-security-copilot/
-
Infosec pro Troy Hunt HasBeenPwned in Mailchimp phish
16,000 stolen records pertain to former and active mail subscribers First seen on theregister.com Jump to article: www.theregister.com/2025/03/25/troy_hunt_mailchimp_phish/
-
Phishing-as-a-Service Professionalität krimineller Dienstleister nimmt spürbar zu
In einem aktuellen Forschungsbericht haben IT-Sicherheitsspezialisten für das vergangene Jahr eine Vervierfachung der Ransomware-Bedrohungen festgestellt. Die Ursache des Anstiegs: die wachsende Verfügbarkeit kommerziell-krimineller Ransomware-as-a-Service-Angebote. Eine weitere Feststellung: auch die Anzahl der Phishing-Attacken hat wieder spürbar zugenommen. Und auch hier wird, so die Forscher, die wachsende Verfügbarkeit krimineller as-a-Service-Angebote für den Anstieg verantwortlich gemacht werden müssen.…
-
New Phishing Attack Uses Browserthe-Browser Technique to Target Gamers
A sophisticated phishing campaign has been uncovered by Silent Push threat analysts, employing the browser-in-the-browser (BitB) technique to target gamers, particularly those playing Counter-Strike 2 on the Steam platform. This campaign involves creating fake but realistic browser pop-up windows that mimic legitimate login pages, aiming to deceive users into divulging their Steam account credentials. The…
-
Microsoft Introduces Security Copilot Agents with Enhanced AI Protections
Microsoft has launched an expanded version of its Security Copilot platform, now equipped with advanced AI agents. These agents are designed to autonomously handle critical security tasks such as phishing detection, data security, and identity management, revolutionizing how organizations protect themselves against cyberattacks. The cyber threat landscape is evolving rapidly, with attacks surpassing human capabilities…
-
Malware und Phishing – Vertrauenswürdige Subdomains lassen Cyberangriffe seriös erscheinen
First seen on security-insider.de Jump to article: www.security-insider.de/cyberkriminelle-nutzen-legitime-infrastruktur-dienste-zur-tarnung-a-a3e339d282ebf21b19b69bb09099cae8/