Tag: phishing
-
Top 5 ways attackers use generative AI to exploit your systems
Tags: access, ai, attack, authentication, awareness, banking, captcha, chatgpt, china, control, cyber, cybercrime, cybersecurity, defense, detection, exploit, extortion, finance, flaw, fraud, group, hacker, intelligence, LLM, malicious, malware, network, phishing, ransomware, resilience, service, spam, tactics, theft, threat, tool, vulnerability, zero-dayFacilitating malware development: Artificial intelligence can also be used to generate more sophisticated or at least less labour-intensive malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s…
-
11. Februar Safer Internet Day: BSI und DsiN räumen mit Mythen zu ESicherheit auf
Ein digitaler Alltag ohne E-Mails ist für die meisten kaum vorstellbar. Das kann jedoch auch Gefahren bergen nicht nur weil das E-Mail-Postfach ein beliebtes Ziel von Phishing-Angriffen ist. Das Bundesamt für Sicherheit in der Informationstechnik (BSI) und Deutschland sicher im Netz (DsiN) möchten daher gemeinsam darüber aufklären, wie Verbraucherinnen und Verbraucher E-Mails sicher nutzen… First…
-
The Rise of Phishing-as-a-Service: How Cybercriminals are Outsourcing Attacks
Phishing attacks are no longer the domain of elite hackers. With the rise of Phishing-as-a-Service (PhaaS), cybercriminals of First seen on securityonline.info Jump to article: securityonline.info/the-rise-of-phishing-as-a-service-how-cybercriminals-are-outsourcing-attacks/
-
Gmail Under Siege: FBI Warns of Unusual AI-Driven Phishing Attacks
FBI warns of AI-driven Gmail phishing attacks as cybercriminals exploit advanced tactics. Strengthen your defenses against these emerging threats. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/trends/fbi-warns-about-gmail-phishing-attacks/
-
Faulty phishing site blocking disrupts Cloudflare services
First seen on scworld.com Jump to article: www.scworld.com/brief/faulty-phishing-site-blocking-disrupts-cloudflare-services
-
Privacy Roundup: Week 6 of Year 2025
Tags: access, ai, api, apple, backdoor, breach, browser, cctv, chrome, control, credit-card, cybersecurity, data, data-breach, encryption, exploit, firmware, framework, germany, government, group, leak, malware, monitoring, phishing, privacy, regulation, risk, router, scam, service, software, spy, technology, threat, tool, update, vpn, vulnerability, windowsThis is a news item roundup of privacy or privacy-related news items for 2 FEB 2025 – 8 FEB 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
-
Why cyber hygiene remains critical in the era of AI-driven threats
Tags: access, ai, attack, authentication, breach, business, cyber, cyberattack, cybersecurity, data, email, exploit, Internet, login, malicious, mfa, network, phishing, resilience, risk, software, strategy, technology, threat, update, vulnerability, zero-trustCyber-attacks are an assumed inevitable for businesses today. As companies increasingly handle large amounts of valuable data, safeguarding operations has never been more important. Now, half (50%) of IT decision-makers report information security as their most time-consuming task[1].While AI offers a promising solution, security leaders must get the basics right first. Only by practicing good…
-
Fortifying cyber security: What does secure look like in 2025?
Tags: access, ai, attack, authentication, business, compliance, cyber, cybercrime, cybersecurity, deep-fake, exploit, finance, Hardware, intelligence, least-privilege, malware, mfa, nis-2, phishing, regulation, resilience, risk, risk-management, scam, software, threat, training, update, vulnerability, zero-trustThe evolving cybersecurity landscape has increased security pressures for IT leaders. With the World Economic Forum estimating, the global cost of cybercrime is projected to reach $10.5trillion annually in 2025, the situation is only escalating[1]. The rise of new technologies, such as Artificial Intelligence (AI), and the complexities introduced by flexible working have made IT…
-
Reale Geschäftsdomäne für Phishing-Angriff missbraucht
Vor wenigen Tagen hat das Threat Lab von KnowBe4 in einem Blogbeitrag die Ergebnisse seiner Analyse einer eher ungewöhnlichen Phishing-Kampagne vorgestellt. Deren Besonderheit: sie erfolgte über eine reale aber kompromittierte Geschäftsdomäne. Den Angreifern war es gelungen, in die DNS-Verwaltungskonsole einer legitimen Domäne einzudringen. Hier hatten sie dann eine Subdomäne und einen TXT-Eintrag erstellt, […] First…
-
Scammers Use Fake Facebook Copyright Notices to Hijack Accounts
A new phishing campaign is targeting businesses with fake Facebook copyright notices. Learn how to spot the signs and keep your Facebook account secure. First seen on hackread.com Jump to article: hackread.com/scammers-use-fake-facebook-copyright-notices-to-hijack-accounts/
-
BSI und DsiN räumen mit Mythen zu ESicherheit auf
Von Phishing-Mails bis E-Mail-Verschlüsselung untersucht das BSI auf seiner Webseite bekannte Mythen rund um die Sicherheit von E-Mail-Kommunikation genauer und gibt Verbraucherinnen und Verbrauchern niedrigschwellige Handlungsempfehlungen zur Prävention. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/bsi-und-dsin-raeumen-mit-mythen-zu-e-mail-sicherheit-auf/a39726/
-
New OG Spoof Toolkit Manipulates Social Media Links for Cybercrime
Cyble Research and Intelligence Labs (CRIL) highlighted the growing misuse of the Open Graph Spoofing Toolkit, a dangerous tool designed to manipulate Open Graph Protocol metadata to trick users into clicking on harmful links. This exploitation of OG tags is a serious concern, as it opens the door to a wide range of phishing attacks…
-
Sophos Uncovers Rising Threat of SVG-Based Phishing Attacks
Sophos has identified a novel phishing technique that leverages Scalable Vector Graphics (SVG) files to bypass anti-spam and First seen on securityonline.info Jump to article: securityonline.info/sophos-uncovers-rising-threat-of-svg-based-phishing-attacks/
-
Kimsuky APT group used custom RDP Wrapper version and forceCopy stealer
Tags: apt, attack, control, group, intelligence, kaspersky, korea, north-korea, phishing, spear-phishingResearchers spotted North Korea’s Kimsuky APT group launching spear-phishing attacks to deliver forceCopy info-stealer malware. Researchers from AhnLab Security Intelligence Center (ASEC) observed North Korea’s Kimsuky APT group conducting spear-phishing attacks to deliver forceCopy info-stealer malware. Kimsuky cyberespionage group (aka ARCHIPELAGO, Black Banshee, Thallium, Velvet Chollima, APT43) was first spotted by Kaspersky researchers in 2013. The group works under the control…
-
Cloudflare outage caused by botched blocking of phishing URL
An attempt to block a phishing URL in Cloudflare’s R2 object storage platform backfired yesterday, triggering a widespread outage that brought down multiple services for nearly an hour. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cloudflare-outage-caused-by-botched-blocking-of-phishing-url/
-
Miercom bestätigt Check Point die höchste Abwehrrate bei Enterprise- und Hybrid-Mesh-Firewalls
Check Point Software Technologies gibt bekannt, dass die Infinity-Plattform eine herausragende Abwehrrate von 99,9 Prozent bei Zero+1-Day-Malware erreicht hat. Weitere Ergebnisse des zeigen eine Phishing-Präventionsrate von 99,7 Prozent, die höchste Sicherheitseffizienz für Secure-Services-Edge-Anwendungsfälle und eine beeindruckende Abwehrrate von 98 Prozent bei hochgradigen und kritischen Vorfällen in Netzwerken. ‘In einem Vergleich […] First seen on netzpalaver.de…
-
New Facebook Fake Copyright Notices to Steal Your FB Accounts
A newly discovered phishing campaign is using fake Facebook copyright infringement notices to trick users into divulging their credentials, potentially compromising business accounts. Phishing Campaign Exploits Facebook Brand to Target Businesses Researchers at Check Point Software Technologies revealed that this campaign, active since December 20, 2024, has already targeted over 12,279 email addresses across hundreds…
-
Cybercriminals Weaponize Graphics Files in Phishing Attacks
Sophos has observed cybercriminals ramping up their use of graphics files as part of email phishing attacks to bypass conventional security protections First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cybercriminals-graphics-files/
-
Overconfident execs are making their companies vulnerable to fraud
Cyber fraud (which includes activity such as hacking, deepfakes, voice cloning and highly sophisticated phishing schemes) rose by 14% year over year, according to Trustpair. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/07/cyber-fraud-growth/
-
Kimsuky Group Leverages RDP Wrapper for Persistent Cyber Espionage
The notorious North Korean APT group Kimsuky has continued its cyber espionage operations, leveraging spear-phishing attacks and remote First seen on securityonline.info Jump to article: securityonline.info/kimsuky-group-leverages-rdp-wrapper-for-persistent-cyber-espionage/
-
GreenSpot APT Phishes 163.com Users with Spoofed Domains
A recent report from Threat Hunting Platform Hunt.io has exposed an ongoing phishing campaign orchestrated by GreenSpot First seen on securityonline.info Jump to article: securityonline.info/greenspot-apt-phishes-163-com-users-with-spoofed-domains/
-
DeepSeek Phishing Sites Pursue User Data, Crypto Wallets
Riding the wave of notoriety from the Chinese company’s R1 AT chatbot, attackers are spinning up lookalike sites for different malicious use cases. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/deepseek-phishing-sites-pursue-user-data-crypto-wallets
-
Weaponized SVG Files With Google Drive Links Attacking Gmail, Outlook Dropbox Users
A new wave of phishing attacks is leveraging Scalable Vector Graphics (SVG) files to bypass traditional email security measures and target users of Gmail, Outlook, Dropbox, and other popular platforms. These attacks, which began gaining momentum in late 2024, have surged since January 2025, demonstrating the adaptability of threat actors in exploiting less scrutinized file…
-
Ukraine’s largest bank PrivatBank Targeted with SmokeLoader malware
UAC-0006, a financially motivated threat actor, targets PrivatBank customers with advanced phishing attacks. CloudSEK’s research reveals malicious emails… First seen on hackread.com Jump to article: hackread.com/ukraine-largest-bank-privatbank-smokeloader-malware/
-
Welchen Cybergefahren der europäische Handelssektor gegenübersteht
Die digitale Transformation macht den Einzelhandel zum begehrten Angriffsziel für Cyberkriminelle. Europa steht im Visier von Hackern und staatlichen Akteuren, die ihre Attacken oft mit raffinierten Phishing-Methoden einleiten. Besonders beliebt: täuschend echt gefälschte Webseiten bekannter Technologiemarken, PayPal, Facebook, Nike, Adidas und Luxuslabels. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/welchen-cybergefahren-der-europaeische-handelssektor-gegenuebersteht/
-
North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials
Tags: apt, attack, credentials, email, group, hacking, intelligence, korea, malware, microsoft, north-korea, office, phishing, spear-phishing, windowsThe North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new findings from the AhnLab Security Intelligence Center (ASEC).The attacks commence with phishing emails containing a Windows shortcut (LNK) file that’s disguised as a Microsoft Office or PDF document. First…
-
Fake DeepSeek Sites Used for Credential Phishing, Crypto Theft, Scams
Researchers see dozens of fake DeepSeek websites used for credential phishing, cryptocurrency theft, and scams. The post Fake DeepSeek Sites Used for Credential Phishing, Crypto Theft, Scams appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/fake-deepseek-sites-used-for-credential-phishing-crypto-theft-scams/