Tag: phishing
-
Cloudflare-Warnung gegen KickAssAnime: Rufmord oder reale Gefahr?
Tags: phishingKickAssAnime wurde von Cloudflare als Phishing-Seite markiert – berechtigte Warnung oder eine gezielter Rufmord? First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/streaming/cloudflare-warnung-gegen-kickassanime-rufmord-oder-reale-gefahr-309640.html
-
Mobile Malware Targeting Indian Banks Exposes 50,000 Users
Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mobile-malware-indian-banks/
-
Hackers Using Fake Microsoft ADFS Login Pages to Steal Credentials
A global phishing campaign is actively exploiting a legacy Microsoft authentication system to steal user credentials and bypass multi-factor authentication (MFA), targeting over 150 organizations. First seen on hackread.com Jump to article: hackread.com/hackers-fake-microsoft-adfs-login-pages-steal-credentials/
-
Phishing Campaign Hijacks High-Profile X Accounts to Promote Crypto Scams
A new wave of phishing attacks is actively targeting high-profile X (formerly Twitter) accounts, with attackers hijacking accounts First seen on securityonline.info Jump to article: securityonline.info/phishing-campaign-hijacks-high-profile-x-accounts-to-promote-crypto-scams/
-
Phishing auch bei Smartphones Sicherheitsrisiko Nr. 1
Tags: phishingFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/phishing-smartphones-sicherheitsrisiko-nr-1
-
Cyberhaven: A Wake-Up Call for Consent Phishing Risks – Grip
Explore how the Cyberhaven attack exposes the dangers of ‘consent phishing’, a tactic that bypasses even robust security measures like MFA. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/cyberhaven-a-wake-up-call-for-consent-phishing-risks-grip/
-
DOJ, Dutch police take down group selling phishing tools to cybercriminals
First seen on scworld.com Jump to article: www.scworld.com/news/doj-dutch-police-take-down-group-selling-phishing-tools-to-cybercriminals
-
Phishing ist auch bei Smartphones das Sicherheitsrisiko Nr. 1
Omdia hat vor kurzem die Ergebnisse einer neuen Globalumfrage unter Smartphone-Nutzern vorgestellt. Deren Fazit: auch wenn es um Smartphones geht, stellen Phishing-Angriffe derzeit das mit Abstand größte Sicherheitsrisiko dar. Fast ein Viertel aller Befragten, knapp 24 Prozent, gab in der Umfrage zu Protokoll, schon mindestens einmal Opfer eines Phishing-Angriffs auf ihr Smartphone geworden zu sein.…
-
Sophisticated Phishing Attack Bypasses Microsoft ADFS MFA
A sophisticated phishing campaign targeting Microsoft ADFS has been observed, affecting more than 150 organizations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/phishing-attack-bypasses-microsoft/
-
SpyCloud Leads the Way in Comprehensive Identity Threat Protection
SpyCloud, a leading identity threat protection company, has unveiled key innovations in its portfolio, driving a shift towards holistic identity security. By leveraging its vast collection of darknet data and automated identity analytics, SpyCloud correlates malware, phishing, and breach exposures across both professional and personal identities. This comprehensive approach allows security and fraud prevention teams…
-
How to Prevent Phishing Attacks with Multi-Factor Authentication
Learn how to protect yourself and your sensitive information from phishing attacks by implementing multi-factor authentication. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/how-to-prevent-phishing-attacks-mfa/
-
1-Click Phishing Campaign Targets High-Profile X Accounts
In an attack vector that’s been used before, threat actors aim to commit crypto fraud by hijacking highly followed users, thus reaching a broad audience of secondary victims. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/one-click-phishing-campaign-high-profile-x-accounts
-
High-profile X Accounts Targeted in Phishing Campaign
Hackers hijack high-profile X accounts with phishing scams to steal credentials and promote fraudulent cryptocurrency schemes First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/x-accounts-targeted-phishing/
-
Crazy Evil gang runs over 10 highly specialized social media scams
The Russian-speaking Crazy Evil group runs over 10 social media scams, tricking victims into installing StealC, AMOS, and Angel Drainer malware. Since 2021, the Crazy Evil gang has become a major cybercriminal group, using phishing, identity fraud, and malware to steal cryptocurrency. Security experts identified six Crazy Evil’s subteams, called AVLAND, TYPED, DELAND, ZOOMLAND, DEFI,…
-
New Phishing Attack Hijacks High-Profile X Accounts to Promote Scam Sites
A new wave of phishing attacks has been identified, targeting high-profile accounts on the social media platform X (formerly Twitter). This campaign, analyzed by SentinelLABS, aims to hijack accounts belonging to prominent individuals and organizations, including U.S. political figures, international journalists, employees of X, and cryptocurrency entities. The compromised accounts are then exploited to promote…
-
Coyote Malware Expands Reach: Now Targets 1,030 Sites and 73 Financial Institutions
Brazilian Windows users are the target of a campaign that delivers a banking malware known as Coyote.”Once deployed, the Coyote Banking Trojan can carry out various malicious activities, including keylogging, capturing screenshots, and displaying phishing overlays to steal sensitive credentials,” Fortinet FortiGuard Labs researcher Cara Lin said in an analysis published last week.The First seen…
-
Using the NIST Phish Scale Framework to Detect and Fight Phishing Attacks
The NIST Phish Scale framework offers a structured and effective approach to improving phishing awareness training in organizations. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/using-the-nist-phish-scale-framework-to-detect-and-fight-phishing-attacks/
-
Devil-Traff: Emerging Malicious SMS Platform Powering Phishing Attacks
In the ever-evolving landscape of cybercrime, bulk SMS platforms like Devil-Traff have emerged as powerful tools for phishing campaigns, exploiting trust and compromising security on a massive scale. Employees in organizations today face an increasing volume of communications emails, instant messages, and ticket updates, providing fertile ground for phishing scams to blend seamlessly into routine…
-
Microsoft Advertisers Account Hacked Using Malicious Google Ads
Tags: attack, credentials, cyber, cybercrime, cybersecurity, exploit, google, login, malicious, malware, microsoft, network, phishing, riskCybersecurity experts have uncovered a sophisticated phishing campaign targeting Microsoft advertising accounts. The attack, orchestrated through malicious Google Ads, aims to steal login credentials of users accessing Microsoft’s advertising platform. This incident highlights the growing risk of malvertising, where cybercriminals exploit legitimate ad networks to deceive users. How the Attack Works The phishing campaign leverages…
-
Devil-Traff: The New SMS Phishing Platform Exploited by Cybercriminals
Security researcher Daniel Kelley at SlashNext has unveiled a new threat to cybersecurity: Devil-Traff, a bulk SMS platform First seen on securityonline.info Jump to article: securityonline.info/devil-traff-the-new-sms-phishing-platform-exploited-by-cybercriminals/
-
.Gov No More: Government Domains Weaponized in Phishing Surge
A recent Cofense Intelligence report has uncovered a troubling trend: threat actors are increasingly abusing .gov top-level domains First seen on securityonline.info Jump to article: securityonline.info/gov-no-more-government-domains-weaponized-in-phishing-surge/
-
Hackers Hijack JFK File Release: Malware Phishing Surge
Veriti Research has uncovered a potentially growing cyber threat campaign surrounding the release of the declassified JFK, RFK, and MLK files. Attackers are capitalizing on public interest in these historical documents to launch potential malware campaigns, phishing schemes, and exploit attempts. Our research indicates that cybercriminals are quick to react to major public events, and……
-
5 Encrypted Attack Predictions for 2025
Tags: access, ai, apt, attack, automation, cloud, communications, computer, computing, control, cryptography, cyber, cyberattack, cybercrime, data, data-breach, defense, detection, email, encryption, exploit, government, group, india, infrastructure, intelligence, Internet, malicious, malware, network, phishing, ransomware, risk, service, tactics, technology, threat, update, vpn, zero-trustThe cyberthreat landscape of 2024 was rife with increasingly sophisticated threats, and encryption played a pivotal role”, a staggering 87.2% of threats were hidden in TLS/SSL traffic. The Zscaler cloud blocked 32.1 billion attempted encrypted attacks, a clear demonstration of the growing risk posed by cybercriminals leveraging encryption to evade detection. ThreatLabz reported that malware…
-
U.S. and Dutch Authorities Dismantle 39 Domains Linked to BEC Fraud Network
U.S. and Dutch law enforcement agencies have announced that they have dismantled 39 domains and their associated servers as part of efforts to disrupt a network of online marketplaces originating from Pakistan.The action, which took place on January 29, 2025, has been codenamed Operation Heart Blocker.The vast array of sites in question peddled phishing toolkits…