Tag: phishing
-
North Korean Hackers Wipe Cryptocurrency Wallets via Fake Job Interviews
Tags: attack, crypto, cyber, cyberattack, cybersecurity, exploit, hacker, jobs, linkedin, north-korea, phishing, tactics, threatCybersecurity experts have uncovered a new wave of cyberattacks linked to North Korean threat actors targeting cryptocurrency wallets in an operation dubbed the >>Contagious Interview
-
Malvertising-Kampagnen mit KI-generierten Content
Das Threat-Intelligence-Team von Malwarebytes hat Malvertising-Kampagnen entdeckt, die KI-generierten Content verwenden, um sich den gängigen Alarmsystemen zu entziehen. Cyberkriminelle nutzen dabei KI, um sogenannte »white pages« (sprich Webseiten, die vermeintlich vertrauenswürdig sind) zu erstellen im Gegensatz zu »black pages«, also Webseiten, die schädliche und potenziell gefährliche Inhalte enthalten, zum Beispiel Phishing-Seiten. Buchen Cyberkriminelle im Rahmen……
-
Users receive at least one advanced phishing link every week
Phishing remains one of the most significant cyber threats impacting organizations worldwide, according to SlashNext. Credential phishing is raising Credential theft attacks … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/06/phishing-cyber-threats/
-
Hackers Exploit Social Security Administration Branding to Deliver ConnectWise RAT
In a concerning escalation of phishing tactics, hackers are spoofing the United States Social Security Administration (SSA) to First seen on securityonline.info Jump to article: securityonline.info/hackers-exploit-social-security-administration-branding-to-deliver-connectwise-rat/
-
Privacy Roundup: Week 1 of Year 2025
Tags: access, ai, android, apple, authentication, botnet, breach, browser, business, captcha, chrome, compliance, cve, cybersecurity, data, data-breach, detection, email, encryption, exploit, finance, firmware, flaw, google, group, hacker, healthcare, HIPAA, infrastructure, injection, Internet, law, leak, login, malware, open-source, password, phishing, privacy, router, service, software, threat, tool, update, virus, vulnerabilityThis is a news item roundup of privacy or privacy-related news items for 29 DEC 2024 – 4 JAN 2024. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things overlap; for…
-
New FireScam Android data-theft malware poses as Telegram Premium app
A new Android malware named ‘FireScam’ is being distributed as a premium version of the Telegram app via phishing websites on GitHub that mimick the RuStore, Russia’s app market for mobile devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-firescam-android-data-theft-malware-poses-as-telegram-premium-app/
-
FireScam: Malware für Android kommt als Telegram Premium App
Telegram Premium als Tarnung: FireScam ist eine Malware, die mit Hilfe von Phishing-Seiten und Firebase gezielt Android-Geräte angreift. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/malware/firescam-malware-fuer-android-kommt-als-telegram-premium-app-306874.html
-
PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps
Cybersecurity researchers have flagged a new malware called PLAYFULGHOST that comes with a wide range of information-gathering features like keylogging, screen capture, audio capture, remote shell, and file transfer/execution.The backdoor, according to Google’s Managed Defense team, shares functional overlaps with a known remote administration tool referred to as Gh0st RAT, which had its source First…
-
36 Chrome Extensions Compromised in Supply Chain Attack
Developers Listed as Public Contact Points Targeted in Phishing Campaign. A supply chain attack that subverted legitimate Google Chrome browser extensions to inject data-stealing malware is more widespread than security researchers first suspected. So far researchers have identified 36 subverted extensions collectively used by 2.6 million people. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/36-chrome-extensions-compromised-in-supply-chain-attack-a-27207
-
Best of 2024: Soticated Attacks
August 27, 2024 Authors: Rui Ataide, Hermes Bojaxhi The GuidePoint Research and Intelligence Team (GRIT) has been tracking a highly… First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/so-phish-ticated-attacks-2/
-
Web3 Attacks Result in $2.3Bn in Cryptocurrency Losses
The amount of crypto stolen in the Web3 ecosystem rose by 31.6% compared to 2023, with phishing the most costly attack vector First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/web3-attacks-cryptocurrency-losses/
-
Dozens of Chrome Extensions Hacked, Exposing Millions of Users to Data Theft
A new attack campaign has targeted known Chrome browser extensions, leading to at least 35 extensions being compromised and exposing over 2.6 million users to data exposure and credential theft.The attack targeted publishers of browser extensions on the Chrome Web Store via a phishing campaign and used their access permissions to insert malicious code into…
-
New details reveal how hackers hijacked 35 Google Chrome extensions
New details have emerged about a phishing campaign targeting Chrome browser extension developers that led to the compromise of at least thirty-five extensions to inject data-stealing code, including those from cybersecurity firm Cyberhaven. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-details-reveal-how-hackers-hijacked-35-google-chrome-extensions/
-
Hacking campaign compromised at least 16 Chrome browser extensions
Threat actors compromised at least 16 Chrome browser extensions leading to the exposure of data from over 600,000 users. A supply chain attack compromised 16 Chrome browser extensions, exposing over 600,000 users. Threat actors targeted the publishers of the extensions on the Chrome Web Store via phishing messages, then once obtained access to their account…
-
Vorsicht Quishing: QR-Code Phishing Scams drohen
Dank der enormen Verbreitung von Smartphones ist parallel die Nutzung von QR-Codes weltweit um 57 % gestiegen. Für das Jahr 2025 wird ein Anstieg um weitere 22 % prognostiziert. Weltweit werden pro Minute bis zu acht neue QR-Codes generiert. Kein Wunder, dass QR-Codes praktisch überall zu finden sind auf Plakatwänden, in Einkaufszentren, in… First seen…
-
16 Chrome Extensions Hacked, Exposing Over 600,000 Users to Data Theft
A new attack campaign has targeted known Chrome browser extensions, leading to at least 16 extensions being compromised and exposing over 600,000 users to data exposure and credential theft.The attack targeted publishers of browser extensions on the Chrome Web Store via a phishing campaign and used their access permissions to insert malicious code into legitimate…
-
Fake Zoom Meeting Links Lead to Million-Dollar Cryptocurrency Heist
A sophisticated phishing campaign masquerading as Zoom meeting invitations has resulted in the theft of millions in cryptocurrency, as revealed by a recent analysis from blockchain security firm SlowMist. By... First seen on securityonline.info Jump to article: securityonline.info/fake-zoom-meeting-links-lead-to-million-dollar-cryptocurrency-heist/
-
Phishing attack compromises General Dynamics employees
First seen on scworld.com Jump to article: www.scworld.com/brief/phishing-attack-compromises-general-dynamics-employees
-
Cloud Atlas Deploys VBCloud Malware: Over 80% of Targets Found in Russia
The threat actor known as Cloud Atlas has been observed using a previously undocumented malware called VBCloud as part of its cyber attack campaigns targeting “several dozen users” in 2024.”Victims get infected via phishing emails containing a malicious document that exploits a vulnerability in the formula editor (CVE-2018-0802) to download and execute malware code,” Kaspersky…
-
Google Impersonation Scams: Cybersecurity Expert Reveals Alarming Tactics
Cybersecurity expert Brian Krebs has uncovered alarming new details about the dangers posed by sophisticated phishing campaigns. In his blog, Krebs reveals the stories of two victims, Adam Griffin and... First seen on securityonline.info Jump to article: securityonline.info/google-impersonation-scams-cybersecurity-expert-reveals-alarming-tactics/
-
Defense Giant General Dynamics Says Employees Targeted in Phishing Attack
General Dynamics says several benefits accounts were hacked after threat actors targeted employees in a phishing campaign. The post Defense Giant General Dynamics Says Employees Targeted in Phishing Attack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/defense-giant-general-dynamics-says-employees-targeted-in-phishing-attack/
-
How are you securing your communications in the wake of the Volt Typhoon revelations?
Tags: access, advisory, android, apple, apt, attack, authentication, business, china, cisa, cisco, cloud, communications, computer, control, cyber, cybersecurity, detection, email, endpoint, espionage, exploit, firewall, firmware, government, group, Hardware, infrastructure, Internet, Intruder, microsoft, network, phishing, ransomware, risk, service, software, technology, threat, tool, update, vpn, vulnerability, windows, zero-dayThe FBI recently released information that text messages between Apple and Android texting systems were insecure and that attackers could listen in and access those communications, more fallout from the revelation that a Chinese-affiliated threat actor had breached telecommunications companies.The announcement that the group known as Salt Typhoon had compromised networks of major global telecommunications…
-
iOS devices more exposed to phishing than Android
The mobile threat landscape continues to grow at an alarming rate as cybercrime groups shift their tactics and target mobile devices in the early stages of their attacks, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/26/mobile-devices-attacks/
-
SEO Poisoning: How Cybercriminals Are Turning Search Engines into Traps
Stay protected from SEO poisoning, a cyber threat exploiting search engine rankings to spread malware and phishing scams…. First seen on hackread.com Jump to article: hackread.com/seo-poisoning-how-scammers-search-engines-traps/
-
Aktuelle Phishing-Welle: Betrug mit Magenta-Treuepunkten
Betrüger versuchen derzeit, Opfern mit überzeugend aufgemachten Phishing-Mails und -Webseiten in Telekom-Optik Geld und Daten abzuluchsen. First seen on heise.de Jump to article: www.heise.de/news/Aktuelle-Phishing-Welle-Betrug-mit-Magenta-Treuepunkten-10220094.html