Tag: phishing
-
Wheelchair Firm Ramps Up Notices to 500,000 for Email Hack
Large Health Data Breach Started With Phishing Lure in Employees’ Email. Tennessee-based Numotion, one of the largest U.S. providers of wheelchairs and other health-related mobility products is notifying nearly 500,000 people of a 2024 email hacking incident that potentially compromised their personal and health-related information. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/wheelchair-firm-ramps-up-notices-to-500000-for-email-hack-a-27814
-
Pocket Card Users Targeted in Sophisticated Phishing Campaign
A new phishing campaign targeting Japanese Pocket Card users has been uncovered by Symantec. The attackers are employing sophisticated tactics to deceive cardholders into divulging their login credentials, potentially compromising their financial accounts. Japanese Cardholders at Risk of Credential Theft The phishing operation begins with fraudulent emails masquerading as official notifications from Pocket Card’s online…
-
New Phishing Campaign Targets macOS Users with Fake Security Alerts
LayerX Labs reports a sophisticated macOS phishing campaign, evading security measures. Learn how attackers adapt and steal credentials from Mac users. First seen on hackread.com Jump to article: hackread.com/new-phishing-campaign-targeted-at-mac-users/
-
Phishing-Angriffe, die legitime Microsoft-Kommunikation missbrauchen, nehmen zu
Am 3. März 2025 hat das KnowBe4-Threat-Labs-Team einen massiven Anstieg von Phishing-Angriffen festgestellt, die von legitimen Microsoft-Domains ausgingen. Erste Aktivitäten hatte KnowBe4-Defend schon ab dem 24. Februar wahrgenommen. Einen Höhepunkt erreichte der Angriff aber erst am 3. März, als von microsoft-noreply@microsoft.com innerhalb eines Zeitraums von nur 30 Minuten 7.000 Angriffe registriert wurden. Zur Durchführung der…
-
New phishing campaign uses scareware to steal Apple credentials
The campaign previously targeted Windows users: According to LayerX researchers, the campaign has been seen targeting Mac users only in the last few months. Initially, it targeted Windows users by masquerading as Microsoft security alerts.Designed to steal user credentials, threat actors have apparently shifted focus to Mac users owing to new security features being rolled…
-
SvcStealer Malware Strikes, Harvesting Sensitive Data from Browsers and Applications
Tags: attack, cyber, cybersecurity, data, email, malicious, malware, phishing, spear-phishing, threatA new strain of malware, known as SvcStealer, has emerged as a significant threat in the cybersecurity landscape. This malware is primarily delivered through spear phishing attacks, where malicious attachments are sent via email to unsuspecting victims. The SvcStealer campaign was first observed in late January 2025 and has been designed to harvest a wide…
-
UK Cybersecurity Weekly News Roundup 23 March 2025
Tags: ai, best-practice, compliance, cyber, cyberattack, cybersecurity, data, disinformation, election, email, espionage, exploit, group, incident, malicious, network, phishing, qr, ransomware, service, threat, update, vulnerabilityWelcome to this week’s edition of our cybersecurity news roundup, bringing you the latest developments and insights from the UK and beyond. NHS Scotland Confirms Cyberattack Disruption On 20 March 2025, NHS Scotland reported a major cyber incident that caused network outages across multiple health boards. The cyberattack disrupted clinical systems and led to delayed…
-
Don’t Click! Fake Chat Used in Meta Business Account Phishing
“What if you received an email stating, ‘YOUR ADS ARE TEMPORARILY SUSPENDED’? The urgency of the email instantly First seen on securityonline.info Jump to article: securityonline.info/dont-click-fake-chat-used-in-meta-business-account-phishing/
-
Digitaler Verbraucherschutz: Phishing und Datenleaks sind die größten Bedrohungen
Zum Weltverbrauchertag hat das Bundesamt für Sicherheit in der Informationstechnik seinen Jahresrückblick zum digitalen Verbraucherschutz 2024 vorgelegt. Für den Beobachtungszeitraum vom 1. Januar bis 31. Dezember 2024 kann gezeigt werden, dass Phishing als Angriffsform und Datenleaks bei Anbietern sich weiterhin als größte digitale Bedrohungen für Verbraucherinnen und Verbraucher darstellen. Während sich Phishing-Angriffe in der… First…
-
Warum eine klassische Multifaktor-Authentifizierung in Zukunft nicht mehr ausreicht
Angreifer nutzen immer häufiger ausgefeilte Phishing-Methoden, um Nutzer dazu zu bringen, sowohl ihr Passwort als auch den temporären 2FA-Code preiszugeben. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/warum-eine-klassische-multifaktor-authentifizierung-in-zukunft-nicht-mehr-ausreicht/a40216/
-
New Phishing Scam Uses Fake Instagram Chatbot to Hijack Accounts
New phishing scam targets Instagram business accounts using fake chatbots and support emails, tricking users into handing over login credentials. First seen on hackread.com Jump to article: hackread.com/phishing-scam-fake-instagram-chatbots-hijack-accounts/
-
Fake Semrush ads used to steal SEO professionals’ Google accounts
A new phishing campaign is targeting SEO professionals with malicious Semrush Google Ads that aim to steal their Google account credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-semrush-ads-used-to-steal-seo-professionals-google-accounts/
-
Securing Your Supply Chain from Phishing Attacks
In this piece, Tass Kalfoglou, the director of our APAC Business Unit, sheds light on supply chain vulnerabilities and the need to level up domain security. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/securing-your-supply-chain-from-phishing-attacks/
-
Hackers Use Fake Meta Emails to Steal Ad Account Credentials
A recent phishing campaign uncovered by the Cofense Phishing Defense Center (PDC) has been exploiting fake Meta emails to deceive users into surrendering their Meta Business account credentials. The attackers initiate the phishing attempt by sending fraudulent emails disguised as official Instagram notifications, alerting users that their advertising accounts have been temporarily suspended due to…
-
Ransomware-Angriffe und KI-gestützte polymorphe Phishing-Kampagnen nehmen zu
KnowBe4 hat ihren veröffentlicht, der für das Frühjahr 2025 die wichtigsten Trends, neuen Daten und Threat-Intelligence-Einblicke zu Phishing-Bedrohungen, die sich gegen Unternehmen richten, liefert. Die Ausgabe beleuchtet, basierend auf den Daten, die von KnowBe4-Defend generiert wurden, die zunehmende Bedrohung durch Ransomware und untersucht, wie Cyberkriminelle ausgeklügelte Taktiken anwenden, um native Sicherheit und […] First seen…
-
Entwicklungsplattform Firebase unter Feuer
Check Point Software Technologies hat eine Hacker-Kampagne gegen Firebase beobachtet, eine Entwicklungsplattform für mobile sowie Web-Applikationen. Die Sicherheitsforscher von Check Point Research (CPR) stießen auf professionell gestaltete und sehr überzeugend gemachte Fälschungen von echten Internet-Auftritten als Phishing-Websites. Die von CPR beobachtete Kampagne beinhaltete die Nutzung kompromittierter Konten, man spricht dabei auch von Business-E-Mail-Compromise (BEC). Sobald…
-
New KnowBe4 Report Reveals a Spike in Phishing Campaigns
KnowBe4, Security Awareness Training leader, today launched its Phishing Threat Trend Report, detailing key trends, new data, and threat intelligence insights surrounding phishing threats targeting organisations at the start of 2025. Based on data generated by KnowBe4 Defend, this edition highlights the growing threat of ransomware and explores how cybercriminals are using sophisticated tactics to…
-
Scammers cash in on tax season
AI-powered phishing emails, deepfake phone calls, and fake tax prep websites are making tax scams more convincing and costly than ever, according to McAfee. Cybercriminals are … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/21/tax-season-scams/
-
Browser-based phishing attacks surge due to AI
First seen on scworld.com Jump to article: www.scworld.com/brief/browser-based-phishing-attacks-surge-due-to-ai
-
AI Drives Surge in Browser-Based Phishing Attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-drives-surge-in-browser-based-phishing-attacks
-
Browser Security Under Siege: The Alarming Rise of AI-Powered Phishing
Analysis reveals a 140% increase in browser phishing, including a 130% increase in zero-hour phishing attacks. The post Browser Security Under Siege: The Alarming Rise of AI-Powered Phishing appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/browser-security-under-siege-the-alarming-rise-of-ai-powered-phishing/
-
Ransomware-Attacke auf Mönchengladbacher Altenheimbetreiber
Eine Ransomware-Bande erpresst den Altenheimbetreiber der Stadt Mönchengladbach mit verschlüsselten Daten. Das Unternehmen weigert sich jedoch, das geforderte Lösegeld zu bezahlen.Wie der Westdeutsche Rundfunk (WDR) berichtet, haben Cyberkriminelle am Montag (17. März) die IT-Systeme der Mönchengladbacher Stadttochter Sozial-Holding lahmgelegt. Von dem Angriff betroffen sind demnach sowohl die Firmenzentrale als auch die Seniorenheime, die von der…
-
Zero-Hour Phishing Attacks Exploiting Browser Vulnerabilities Surge by 130%
Menlo Security, a leader in Secure Enterprise Browsers, has released its annual State of Browser Security Report, revealing a sharp rise in browser-based cyberattacks. The report highlights a 130% surge in zero-hour phishing attacks and a significant increase in the exploitation of generative AI (GenAI) platforms for fraudulent activities. Menlo Threat Intelligence analyzed over 752,000…