Tag: phishing
-
US Government Agencies Impersonated in Aggressive DocuSign Phishing Scams
DocuSign phishing scams surged by 98%, with hundreds of daily attacks impersonating US government agencies like HHS and… First seen on hackread.com Jump to article: hackread.com/us-govt-agencies-impersonate-docusign-phishing-scams/
-
Fake Donald Trump Assassination Story Used in Phishing Scam
A phishing email claims to be from the New York Times with a story about an assassination attempt against President-elect Donald Trump First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fake-trump-assassination-phishing/
-
Surge in DocuSign Phishing Attacks Target US State Contractors
Phishing attacks using DocuSign impersonations targeting state agencies have surged 98% since Nov 8 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/docusign-phishing-targets-us-state/
-
North Korean IT Worker Network Tied to BeaverTail Phishing Campaign
BeaverTail malware has been used to target tech job seekers through fake recruiters, Palo Alto Networks’ Unit 42 has found First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/north-korean-it-worker-beavertail/
-
Fake Discount Sites Exploit Black Friday to Hijack Shopper Information
A new phishing campaign is targeting e-commerce shoppers in Europe and the United States with bogus pages that mimic legitimate brands with the goal of stealing their personal information ahead of the Black Friday shopping season.”The campaign leveraged the heightened online shopping activity in November, the peak season for Black Friday discounts. The threat actor…
-
Chinese Threat Actor SilkSpecter Exploits Black Friday Frenzy with Sophisticated Phishing Campaign
In a detailed report released by the EclecticIQ Threat Research Team, cybersecurity analysts have uncovered a well-coordinated phishing campaign targeting e-commerce shoppers in the United States and Europe during the... First seen on securityonline.info Jump to article: securityonline.info/chinese-threat-actor-silkspecter-exploits-black-friday-frenzy-with-sophisticated-phishing-campaign/
-
Phishing emails increasingly use SVG attachments to evade detection
Threat actors increasingly use Scalable Vector Graphics (SVG) attachments to display phishing forms or deploy malware while evading detection. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phishing-emails-increasingly-use-svg-attachments-to-evade-detection/
-
Two-Step Phishing Technique Leveraging Microsoft Visio Files Exposed by Researchers
Perception Point’s latest findings have uncovered an advanced two-step phishing technique exploiting Microsoft Visio files (.vsdx) and SharePoint to launch highly deceptive credential theft campaigns. Traditionally used for professional diagrams... First seen on securityonline.info Jump to article: securityonline.info/two-step-phishing-technique-leveraging-microsoft-visio-files-exposed-by-researchers/
-
SecuritySerie <> Staffel 6 veröffentlicht
Der Anbieter der weltweit größten Plattform für Security-Awareness-Trainings und simuliertes Phishing, KnowBe4, veröffentlicht die 6. Staffel seiner Erfolgsserie ‘The Inside Man”. Die Premierenfeier fand in den USA am 13. November statt. In der sechsten Staffel der Serie kehren alle bei den Fans beliebten Hauptfiguren zurück und stellen sich einem neuen Bösewicht und seiner cyberkriminellen Organisation.…
-
Chinese SilkSpecter Hackers Attacking Black Friday Shoppers
SilkSpecter, a Chinese financially motivated threat actor, launched a sophisticated phishing campaign targeting e-commerce shoppers in Europe and the USA during the Black Friday shopping season. The campaign leveraged the legitimate payment processor Stripe to steal victims’ Cardholder Data (CHD) and Sensitive Authentication Data (SAD) while allowing legitimate transactions to proceed. The threat actor used…
-
KnowBe4 Named as One of Newsweek’s Top UK Most Loved Workplaces For 2024
Today, KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, announced that it has been named as o… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/11/04/knowbe4-named-as-one-of-newsweeks-top-uk-most-loved-workplaces-for-2024/
-
Black Friday: Hochsaison für Schnäppchenjagd und raffinierte Phishing-Angriffe
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/black-friday-hochsaison-schnaeppchenjagd-raffinesse-phishing-angriffe
-
Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme
Multiple threat actors have been found taking advantage of an attack technique called Sitting Ducks to hijack legitimate domains for using them in phishing attacks and investment fraud schemes for years.The findings come from Infoblox, which said it identified nearly 800,000 vulnerable registered domains over the past three months, of which approximately 9% (70,000) have…
-
Neue Phishing-Mail in Umlauf: Paypal-Konto angeblich gesperrt
First seen on golem.de Jump to article: www.golem.de/news/bezahldienst-phisher-drohen-paypal-kunden-mit-gesperrten-konten-2410-190354.html
-
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails
A newly patched security flaw impacting Windows NT LAN Manager (NTLM) was exploited as a zero-day by a suspected Russia-linked actor as part of cyber attacks targeting Ukraine.The vulnerability in question, CVE-2024-43451 (CVSS score: 6.5), refers to an NTLM hash disclosure spoofing vulnerability that could be exploited to steal a user’s NTLMv2 hash. It was…
-
GitHub developer compromise sought by novel GoIssue phishing tool
First seen on scworld.com Jump to article: www.scworld.com/brief/github-developer-compromise-sought-by-novel-goissue-phishing-tool
-
Hive0145 Targets Europe with Advanced Strela Stealer Campaigns
Hive0145 is targeting Spain, Germany, Ukraine with Strela Stealer malware in invoice phishing tactic First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/hive0145-targets-eu-strela-stealer/
-
KnowBe4 veröffentlicht kostenfreies Holiday-Kit zur Stärkung der Cyberresilienz
Der Anbieter der weltweit größten Plattform für Security-Awareness-Trainings und simuliertes Phishing, KnowBe4, veröffentlicht sein neues . Die Materialien sollen die Cyberabwehr der Nutzer während der Festtage stärken. Das diesjährige Kit baut auf dem Erfolg früherer Versionen auf und bietet eine Auswahl an neuen und verbesserten Ressourcen, um den neuesten Cyberbedrohungen im Zusammenhang […] First seen…
-
Voice Phishing: Diese Android-Malware lässt dich mit Hackern telefonieren
First seen on t3n.de Jump to article: t3n.de/news/voice-phishing-diese-android-malware-laesst-dich-mit-hackern-telefonieren-1654910/
-
GoIssue phishing tool targets GitHub developer credentials
Researchers discovered GoIssue, a new phishing tool targeting GitHub users, designed to extract email addresses from public profiles and launch mass email attacks. Marketed on … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/13/goissue-phishing-tool-targets-github-developer-credentials/
-
Black-Friday Hochsaison für raffinierte Phishing-Angriffe
Eine vermeintlich harmlose E-Mail wird übermittelt: ‘Ihr exklusiver Black-Friday-Gutschein ist da!” Solche E-Mails landen gerade in diesem Monat immer häufiger im Posteingang. Die E-Mails sind dabei perfekt gestaltet mit einem offiziellen Logo, einer persönlichen Anrede und einem Call-to-Action-Button. Ein Klick auf den eingebetteten Link führt jedoch nicht zum versprochenen Rabatt, sondern zu einer gefälschten […]…
-
KnowBe4 Releases 2024 Holiday Kit to Boost Cyber Resilience
This week, KnowBe4, the provider of security awareness training and simulated phishing platform, announced the release of its new 2024 Holiday Resource Kit, designed to strengthen users’ cyber defences during the festive season. This year’s kit builds on the success of previous versions, offering a selection of new and improved resources to address the latest…
-
Comprehensive Guide to Building a Strong Browser Security Program
The rise of SaaS and cloud-based work environments has fundamentally altered the cyber risk landscape. With more than 90% of organizational network traffic flowing through browsers and web applications, companies are facing new and serious cybersecurity threats. These include phishing attacks, data leakage, and malicious extensions. As a result, the browser also becomes a vulnerability…
-
New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls
Cybersecurity researchers have discovered a new version of a well-known Android malware family dubbed FakeCall that employs voice phishing (aka vishin… First seen on thehackernews.com Jump to article: thehackernews.com/2024/11/new-fakecall-malware-variant-hijacks.html
-
The rise of phishing-resistant MFA and what it means for a passwordless future
First seen on scworld.com Jump to article: www.scworld.com/resource/the-rise-of-phishing-resistant-mfa-and-what-it-means-for-a-passwordless-future
-
Vulnerability Recap 10/28/24 Phishing, DoS, RCE a Zero-Day
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-october-28-2024/
-
TA455’s Iranian Dream Job Campaign Targets Aerospace with Malware
The TA455 phishing campaign used fake job offers on LinkedIn to deploy malware First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ta455s-iranian-dream-job-campaign/
-
New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns
Cybersecurity researchers are calling attention to a new sophisticated tool called GoIssue that can be used to send phishing messages at scale targeting GitHub users.The program, first marketed by a threat actor named cyberdluffy (aka Cyber D’ Luffy) on the Runion forum earlier this August, is advertised as a tool that allows criminal actors to…
-
Phishing Tool GoIssue Targets Developers on GitHub
New phishing tool GoIssue targets GitHub, enabling mass phishing, and has been linked to the GitLoker extortion campaign First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/phishing-goissue-targets-github/