Tag: phishing
-
Aktuelle Phishing-Welle: Betrug mit Magenta-Treuepunkten
Betrüger versuchen derzeit, Opfern mit überzeugend aufgemachten Phishing-Mails und -Webseiten in Telekom-Optik Geld und Daten abzuluchsen. First seen on heise.de Jump to article: www.heise.de/news/Aktuelle-Phishing-Welle-Betrug-mit-Magenta-Treuepunkten-10220094.html
-
7 biggest cybersecurity stories of 2024
Tags: access, ai, alphv, at&t, attack, authentication, breach, business, china, cio, ciso, citrix, cloud, credentials, crowdstrike, crypto, cyber, cybercrime, cybersecurity, data, data-breach, deep-fake, detection, email, espionage, exploit, extortion, finance, google, government, group, hacking, healthcare, incident response, infection, insurance, intelligence, international, jobs, lockbit, malicious, malware, mandiant, mfa, microsoft, network, nis-2, north-korea, office, phishing, phone, privacy, ransomware, regulation, risk, risk-management, scam, service, software, strategy, tactics, technology, threat, ukraine, update, vulnerability, windowsCybersecurity headlines were plenty this year, with several breaches, attacks, and mishaps drawing worldwide attention.But a few incidents in particular had far-reaching consequences, with the potential to reshape industry protections, shake up how vendors secure customers’ systems, or drive security leaders to reassess their strategies.Longer-term trends such as increased cybersecurity regulations and the impact of…
-
WikiKit Phishing Kit Targets Major Industries with Evasive Techniques
TRAC Labs recently unveiled a new phishing kit, named WikiKit, which is targeting industries across automotive, manufacturing, medical, and more. This sophisticated attack employs unique techniques to evade detection and... First seen on securityonline.info Jump to article: securityonline.info/wikikit-phishing-kit-targets-major-industries-with-evasive-techniques/
-
AI-fueled phishing, shadow AI, jailbreaks kept security pros busy in 2024
First seen on scworld.com Jump to article: www.scworld.com/news/ai-fueled-phishing-shadow-ai-jailbreaks-kept-security-pros-busy-in-2024
-
Turmoil Besets Phishing-as-a-Service Toolkit Rockstar 2FA
Infrastructure Problems Blamed; Users Appear to Move to Similar FlowerStorm Service. As the end of the year approaches, it’s out with the old and in with the new as researchers report that Rockstar 2FA, which once facilitated prolific phishing-as-a-service hits, has crashed and burned, apparently leading many one-time users to move to rival FlowerStorm. First…
-
Protect 3 Devices With This Maximum Security Software
Trend Micro guards desktop and mobile devices from ransomware, phishing schemes, spam, and more for one year. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/trend-micro-maximum-security/
-
New FlowerStorm Microsoft phishing service fills void left by Rockstar2FA
A new Microsoft 365 phishing-as-a-service platform called “FlowerStorm” is growing in popularity, filling the void left behind by the sudden shutdown of the Rockstar2FA cybercrime service. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-flowerstorm-microsoft-phishing-service-fills-void-left-by-rockstar2fa/
-
Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service
An interruption to the phishing-as-a-service (PhaaS) toolkit called Rockstar 2FA has led to a rapid uptick in activity from another nascent offering named FlowerStorm.”It appears that the [Rockstar2FA] group running the service experienced at least a partial collapse of its infrastructure, with pages associated with the service no longer reachable,” Sophos said in a new…
-
New Python NodeStealer Attacking Facebook Business To Steal Login Credentials
Tags: business, credentials, credit-card, cyber, data, email, finance, login, malicious, malware, phishing, powershell, spear-phishing, threatNodeStealer, initially a JavaScript-based malware, has evolved into a more sophisticated Python-based threat that targets Facebook Ads Manager accounts, stealing sensitive financial and business data in addition to credit card details and browser information. The malware is delivered through spear-phishing emails with malicious links, uses DLL sideloading and encoded PowerShell for stealthy execution, and exfiltrates…
-
Cybersicherheit im Wandel: Überblick der wichtigsten Trends für 2025
Das Jahr 2024 hat die Cybersicherheitslandschaft grundlegend verändert: Zum einen haben generative KI-Systeme einen Aufschwung erlebt bei der Erkennung von Bedrohungen und der Automatisierung von Sicherheitsprozessen, aber gleichzeitig auch im Einsatz Cyberkrimineller, etwa in Phishing-Kampagnen und bei Social Engineering. Darüber hinaus haben der Vormarsch des Internet of Things (IoT) zu einer Vergrößerung der Angriffsfläche… First…
-
Evilginx: Open-source man-inmiddle attack framework
Evilginx is an open-source man-in-the-middle attack framework designed to phish login credentials and session cookies, enabling attackers to bypass 2FA safeguards. >>Back … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/23/evilginx-open-source-man-in-the-middle-attack-framework/
-
4 Wege zu neuer Cyberabwehrstärke
Tags: ai, antivirus, application-security, backdoor, cio, cloud, crypto, cyberattack, cybersecurity, data-breach, ddos, detection, hacker, iot, phishing, RedTeam, reverse-engineering, tool, vulnerabilityAnurag Goyal ist Head of Cybersecurity beim Plattformanbieter RedDoorz. Darüber hinaus hat er sich auch als Sicherheitsforscher und Ethical Hacker einen Namen gemacht. Anurag Goyal 3. Red Teaming Red Teaming stellt einen dynamischen und umfassenden Ansatz dar, um die Cyberresilienz von Organisationen zu bewerten und zu optimieren. Dabei simulieren Security-Profis ausgeklügelte Cyberattacken und ahmen dazu…
-
FlowerStorm Seizes Opportunity as Rockstar2FA Crumbles
Despite its popularity, the phishing-as-a-service platform Rockstar2FA suffered a partial collapse in November 2024 due to technical issues, allowing the new phishing toolkit FlowerStorm to emerge, according to Sophos MD.... First seen on securityonline.info Jump to article: securityonline.info/flowerstorm-seizes-opportunity-as-rockstar2fa-crumbles/
-
Cybercriminals Go Mobile: Executives Targeted in Advanced Phishing Campaigns
Cybercriminals are targeting corporate executives with highly advanced mobile spear phishing attacks, leveraging sophisticated evasion techniques and exploiting the inherent vulnerabilities of mobile devices, a new report reveals. In today’s... First seen on securityonline.info Jump to article: securityonline.info/cybercriminals-go-mobile-executives-targeted-in-advanced-phishing-campaigns/
-
Tax-Themed Campaign Exploits Windows MSC Files to Deliver Stealthy Backdoor
The Securonix Threat Research team has uncovered a sophisticated phishing campaign named FLUX#CONSOLE, leveraging tax-related lures and the use of Windows MSC (Microsoft Management Console) files to deploy a stealthy... First seen on securityonline.info Jump to article: securityonline.info/tax-themed-campaign-exploits-windows-msc-files-to-deliver-stealthy-backdoor/
-
Managed XDR, AI and SMB Defense: Barracuda CEO Shares Vision
Barracuda CEO Hatem Naguib Shares Strategies for Email Protection, Managed Services. With cyberthreats becoming more sophisticated, Barracuda CEO Hatem Naguib explains how managed XDR and AI-driven email protection help SMBs. From stopping phishing attacks to automating incident response, Naguib highlights solutions that streamline operations and address cloud adoption risks. First seen on govinfosecurity.com Jump to…
-
CISA Urges Encrypted Messaging After Salt Typhoon Hack
The US Cybersecurity and Infrastructure Security Agency recommended users turn on phishing-resistant MFA and switch to Signal-like apps for messaging First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-e2e-messaging-salt-typhoon/
-
Neuer Unit 42-Forschungsbericht: Kampagne zielt auf europäische Unternehmen
HubSpot wurde bei dieser Phishing-Kampagne nicht angegriffen und die Free Form Builder-Links wurden nicht über die HubSpot-Infrastruktur an die Betroffenen übermittelt. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/neuer-unit-42-forschungsbericht-kampagne-zielt-auf-europaeische-unternehmen/a39323/
-
Wo Europas größte IT-Bedrohungen liegen
Ein neuer Bericht hat einen beunruhigenden Anstieg von Cyberangriffen in Europa enthüllt. KI-Phishing, Ransomware und Lieferkettenschwachstellen dominieren. Organisationen stehen vor der Herausforderung, ihre Abwehrstrategien zu modernisieren, um diesen raffinierten Bedrohungen zu begegnen. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/europas-groesste-it-bedrohungen/
-
Phishing Campaign Targets European Companies with Fake HubSpot and DocuSign Forms
Tags: phishingA recent report by Unit 42 researchers has uncovered an extensive phishing campaign targeting European companies, with the automotive, chemical, and industrial compound manufacturing sectors among the hardest hit. The... First seen on securityonline.info Jump to article: securityonline.info/phishing-campaign-targets-european-companies-with-fake-hubspot-and-docusign-forms/
-
Earth Koshchei’s Rogue RDP Campaign: A Sophisticated APT Attack Targets Governments and Enterprises
Trend Micro has unveiled a large-scale rogue remote desktop protocol (RDP) campaign conducted by the threat group Earth Koshchei. Known for their espionage operations, Earth Koshchei leveraged spear-phishing emails and... First seen on securityonline.info Jump to article: securityonline.info/earth-koshcheis-rogue-rdp-campaign-a-sophisticated-apt-attack-targets-governments-and-enterprises/
-
Credential phishing attacks surge, report reveals
First seen on scworld.com Jump to article: www.scworld.com/brief/credential-phishing-attacks-surge-report-reveals
-
European firms subjected to HubSpot-exploiting phishing
First seen on scworld.com Jump to article: www.scworld.com/brief/european-firms-subjected-to-hubspot-exploiting-phishing
-
Google Calendar leveraged to facilitate stealthy phishing
First seen on scworld.com Jump to article: www.scworld.com/brief/google-calendar-leveraged-to-facilitate-stealthy-phishing
-
AI-Powered Phishing: Defending Against the Next Generation of Cyber Threats
AI isn’t just transforming businesses, but also changing the way cyber criminals operate. One of those ways is more convincingAI-powered scams, whether delivered via: Phishing messages are becoming indistinguishable from the real thing. These types of attacks are also exploding in volume. This presents new challenges to organizations. How can they train their staff to…
-
Malvertisers Fool Google With AI-Generated Decoy Content
Seemingly innocent white pages, including an elaborate Star Wars-themed site, are bypassing Google’s malvertising filters, showing up high in search results to lure users to second-stage phishing sites. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/malvertisers-fool-google-ai-generated-decoy-content
-
Google Calendar Phishing Scam Targets Users with Malicious Invites
Protect yourself from sophisticated phishing attacks that leverage Google Calendar to steal your personal information. First seen on hackread.com Jump to article: hackread.com/google-calendar-phishing-scam-users-malicious-invites/