Tag: phishing
-
Phishing-Kampagne nutzt Recovery Feature von Microsoft Word
Eine neue Phishing-Kampagne nutzt beschädigte Word-Dokumente, um die Opfer zu täuschen. Nutzen die Opfer das Recovery Feature von Microsoft Word, öffnen sie damit die kompromittierte Datei. First seen on 8com.de# Jump to article: www.8com.de#
-
Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses
Cybersecurity researchers have called attention to a novel phishing campaign that leverages corrupted Microsoft Office documents and ZIP archives as a way to bypass email defenses.”The ongoing attack evades #antivirus software, prevents uploads to sandboxes, and bypasses Outlook’s spam filters, allowing the malicious emails to reach your inbox,” ANY.RUN said in a series of posts…
-
BlackBerry Highlights Rising Software Supply Chain Risks in Malaysia
Tags: access, ai, attack, breach, ceo, ciso, communications, compliance, cyber, cyberattack, cybersecurity, data, detection, espionage, finance, framework, government, infrastructure, intelligence, international, Internet, iot, malware, mobile, monitoring, phishing, ransomware, regulation, resilience, risk, skills, software, strategy, supply-chain, threat, tool, training, vulnerabilityIn 2024, BlackBerry unveiled new proprietary research, underscoring the vulnerability of software supply chains in Malaysia and around the world.According to the study, 79% of Malaysian organizations reported cyberattacks or vulnerabilities in their software supply chains during the past 12 months, slightly exceeding the global average of 76%. Alarmingly, 81% of respondents revealed they had…
-
Cloudflare’s developer domains increasingly abused by threat actors
Cloudflare’s ‘pages.dev’ and ‘workers.dev’ domains, used for deploying web pages and facilitating serverless computing, are being increasingly abused by cybercriminals for phishing and other malicious activities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cloudflares-developer-domains-increasingly-abused-by-threat-actors/
-
Kimsuky Group Adopts New Phishing Tactics to Target Victims
North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/kimsuky-adopts-new-phishing-tactics/
-
Corrupted Microsoft Office Documents Used In Phishing Campaign
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36662/Corrupted-Microsoft-Office-Documents-Used-In-Phishing-Campaign.html
-
KnowBe4 Releases the Latest Phishing Trends in Q3 2024 Phishing Report, With QR Code Phishing on the Rise
KnowBe4, the world-renowned cybersecurity platform that comprehensively addresses human risk management, today released its Q3 2024 Phishing Report. This quarter’s findings reveal the most frequently clicked email subjects in simulated phishing tests, demonstrating the continued efficacy of HR and IT-related phishing attempts. KnowBe4’s Q3 2024 Phishing Report reveals that HR and IT-related phishing emails The…
-
SmokeLoader picks up ancient MS Office bugs to pack fresh credential stealer
Threat actors are using a well-known modular malware loader, SmokeLoader, to exploit known Microsoft Office vulnerabilities and steal sensitive browser credentials.The loader which runs a framework to deploy multiple malware modules, was observed by Fortinet’s FortiGuard Labs in attacks targeting manufacturing, healthcare, and IT companies in Taiwan.”SmokeLoader, known for its ability to deliver other malicious…
-
Zu den am häufigsten angeklickten PhishingMails gehören nach wie vor HR- und IT-bezogene E-Mails
KnowBe4 veröffentlichte ihren . Die Ergebnisse dieses Quartals zeigen die am häufigsten angeklickten E-Mail-Betreffe in simulierten Phishing-Tests, was die anhaltende Wirksamkeit von Phishing-Versuchen im HR- und IT-Bereich belegt. Der von KnowBe4 zeigt, dass HR- und IT-bezogene Phishing-E-Mails einen signifikanten Anteil von 48,6 % der weltweit am häufigsten angeklickten […] First seen on netzpalaver.de Jump to…
-
Phishers send corrupted documents to bypass email security
Phishers have come up with a new trick for bypassing email security systems: corrupted MS Office documents. The spam campaign Malware hunting service Any.Run has warned last … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/03/phishers-send-corrupted-documents-to-bypass-email-security/
-
North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks
Tags: attack, credentials, cybersecurity, email, hacker, korea, north-korea, phishing, russia, service, theft, threatThe North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately conduct credential theft.”Phishing emails were sent mainly through email services in Japan and Korea until early September,” South Korean cybersecurity company Genians said. “Then, from…
-
Hundreds of UK Ministry of Defence passwords found circulating on the dark web
Tags: 2fa, access, attack, authentication, banking, breach, credentials, cyber, cybercrime, cybersecurity, dark-web, data, data-breach, email, government, hacker, intelligence, iraq, login, malware, mfa, password, phishing, risk, russia, theft, warfareThe login credentials of nearly 600 employees accessing a key British Ministry of Defence (MOD) employee portal have been discovered circulating on the dark web in the last four years, it has been reported.According to the i news site, the stolen credentials were for the MOD’s Defence Gateway website, a non-classified portal used by employees…
-
Interpol Cyber-Fraud Action Nets More Than 5K Arrests
Chalk up another win for global cooperation among law enforcement, this time targeting seven types of cyber fraud, including voice phishing and business email compromise. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/interpol-cyber-fraud-action-5k-arrests
-
SmokeLoader Campaign Targets Taiwanese Companies
Theat Actor Uses Trojan as Infostealer. A threat actor is targeting Taiwanese companies using phishing emails and long-standing vulnerabilities to deliver SmokeLoader malware. The threat actor uses plugins for the infamous malware to directly attack systems rather than using SmokeLoader as its name suggests, as a loader for other malware. First seen on govinfosecurity.com Jump…
-
New Rockstar 2FA Phishing-as-a-Service Kit Targets Microsoft 365 Accounts
SUMMARY Cybersecurity researchers at Trustwave have discovered >>Rockstar 2FA,
-
Novel phishing campaign uses corrupted Word documents to evade security
A novel phishing attack abuses Microsoft’s Word file recovery feature by sending corrupted Word documents as email attachments, allowing them to bypass security software due to their damaged state but still be recoverable by the application. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/novel-phishing-campaign-uses-corrupted-word-documents-to-evade-security/
-
Corrupted Word Files Fuel Sophisticated Phishing Campaign
A new phishing attack uses corrupted Word docs to bypass security, luring victims with fake payroll and HR emails First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/corrupted-word-files-fuel-phishing/
-
How AI Is Enhancing Security in Ridesharing
Whether it’s detecting fraudulent activity, preventing phishing, or protecting sensitive data, AI is transforming cybersecurity in ridesharing. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/ai-enhancing-ridesharing-security
-
SmokeLoader Malware Campaign Targets Companies in Taiwan
SmokeLoader malware identified targeting Taiwanese firms via phishing, exploiting Microsoft Office vulnerabilities First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/smokeloader-malware-taiwan/
-
THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25 – Dec 1)
Ever wonder what happens in the digital world every time you blink? Here’s something wild – hackers launch about 2,200 attacks every single day, which means someone’s trying to break into a system somewhere every 39 seconds.And get this – while we’re all worried about regular hackers, there are now AI systems out there that…
-
Operation HAECHI-V led to more than 5,500 suspects arrested
International law enforcement operation Operation HAECHI-V led to more than 5,500 suspects arrested and seized over $400 million. A global operation code-named Operation HAECHI V, involving 40 countries, resulted in 5,500+ arrests and seized $400M in assets. Operation HAECHI V (July-Nov 2024) targeted cyber frauds like phishing, romance scams, sextortion, investment fraud, online gambling, BEC,…
-
Novel phising campaign uses corrupted Word documents to evade security
A novel phishing attack abuses Microsoft’s Word file recovery feature by sending corrupted Word documents as email attachments, allowing them to bypass security software due to their damaged state but still be recoverable by the application. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/novel-phising-campaign-uses-corrupted-word-documents-to-evade-security/
-
Angreifer umgehen Virenscan mittels beschädigter Word-Dokumente
Tags: phishingSicherheitsforscher sind auf eine neue Methode gestoßen, wie Cyberkriminelle präparierte Dokumente am Virenschutz vorbeischieben. First seen on heise.de Jump to article: www.heise.de/news/Phishing-Angreifer-umgehen-Virenscan-mittels-beschaedigter-Word-Dokumente-10184679.html
-
Poison Ivy APT Launches Continuous Cyber Attack on Defense, Gov, Tech Edu Sectors
Researchers uncovered the resurgence of APT-C-01, also known as the Poison Ivy group, an advanced persistent threat organization notorious for its sustained cyber attacks. This group has been actively targeting sectors such as defense, government, technology, and education since 2007, utilizing sophisticated phishing techniques including watering hole phishing and spear phishing. Recent threat-hunting activities have…