Tag: phishing
-
New GitLoker-Linked GoIssue Tool Targets GitHub Users for Phishing
SlashNext researchers have discovered a new, sophisticated phishing tool GoIssue targeting GitHub developers. Learn about its capabilities, the… First seen on hackread.com Jump to article: hackread.com/gitloker-goissue-tool-targets-github-phishing-users/
-
Phishing-Angriffswelle auf LinkedIn nimmt Arbeitssuchende ins Visier
Laut einem kürzlich von Malwarebyte-Forschern veröffentlichten Bericht sind Cyberkriminelle zunehmend auf LinkedIn aktiv. Mit Phishing- und Spear-Phishing-Kampagnen versuchen sie, an die Anmeldedaten ihrer Opfer, die auf LinkedIn nach einer (besseren) Anstellung suchen, zu gelangen. Hierzu erstellen die Betrüger gefälschte Recruiter-Profile. Sie nutzen die Namen real existierender Personen und deren Profilbilder oder lassen sich welche von…
-
New Phishing Kit Xiū gǒu Targets Users Across Five Countries With 2,000 Fake Sites
Cybersecurity researchers have disclosed a new phishing kit that has been put to use in campaigns targeting Australia, Japan, Spain, the U.K., and the… First seen on thehackernews.com Jump to article: thehackernews.com/2024/11/new-phishing-kit-xiu-gou-targets-users.html
-
Flexible Structure of Zip Archives Exploited to Hide Malware Undetected
Attackers abuse concatenation, a method that involves appending multiple zip archives into a single file, to deliver a variant of the SmokeLoader Trojan hidden in malicious attachments delivered via phishing First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/flexible-structure-zip-archives-exploited-hide-malware-undetected
-
New Remcos RAT Variant Targets Windows Users Via Phishing
The new Remcos RAT variant identified in a new phishing campaign exploits CVE-2017-0199 via malicious Excel files First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/remcos-rat-variant-targets-windows/
-
Microsoft Visio Files Used in Sophisticated Phishing Attacks
Researchers have uncovered a surge in phishing attacks using Visio .vsdx files to evade security scans First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-visio-files-phishing/
-
A new fileless variant of Remcos RAT observed in the wild
Fortinet researchers discovered a new phishing campaign spreading a variant of the commercial malware Remcos RAT. Fortinet’s FortiGuard Labs recently uncovered a phishing campaign spreading a new variant of the Remcos RAT. Remcos is a commercial remote administration tool (RAT) that is sold online to allow buyers remote control over computers. Threat actors use Remcos…
-
The Urgent Call: How a Phishing Email Pushed Buckeye Elementary to Strengthen Cyber Defenses
In our latest webinar, we explored real-world cybersecurity and online safety incidents, focusing on strategies that K-12 techs can use to prepare for hidden digital threats. Guest speakers Sal Franco, IT Director at Buckeye Elementary, and Fran Watkins, Technology Manager at Centennial School District, shared first-hand stories of ransomware and data loss incidents that tested…
-
Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware
Tags: computer, control, cybercrime, cybersecurity, exploit, fortinet, malware, phishing, rat, threatCybersecurity researchers have discovered a new phishing campaign that spreads a new fileless variant of known commercial malware called Remcos RAT.Remcos RAT “provides purchases with a wide range of advanced features to remotely control computers belonging to the buyer,” Fortinet FortiGuard Labs researcher Xiaopeng Zhang said in an analysis published last week.”However, threat actors have…
-
XiÅ« GÇ’u Phishing Kit: The ‘Doggo’ of Phishing Campaigns with Global Reach
Tags: phishingThe Netcraft research team recently revealed details about a new and distinct phishing kit known as XiÅ« GÇ’u (修狗). In use since September 2024, t… First seen on securityonline.info Jump to article: securityonline.info/xiu-gou-phishing-kit-the-doggo-of-phishing-campaigns-with-global-reach/
-
Scattered Spider Spins a New Web: Detecting 0ktapus Phishing Domains
The prolific 0ktapus, also known as Scattered Spider and Starfraud, continues to evolve in its approach to phishing attacks targeting cloud-based environments. Wiz Research’s latest report sheds light on the... First seen on securityonline.info Jump to article: securityonline.info/scattered-spider-spins-a-new-web-detecting-0ktapus-phishing-domains/
-
US Sentences Nigerian Phisher To 26 Years In Prison
Tags: phishingFirst seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36550/US-Sentences-Nigerian-Phisher-To-26-Years-In-Prison.html
-
In Other News: China Hacked Singtel, GuLoader Attacks on Industrial Firms, LastPass Phishing Campaign
Noteworthy stories that might have slipped under the radar: China’s Volt Typhoon hacked Singtel, GuLoader targets European industrial organizations, and US agency warns employees about phone use. The post In Other News: China Hacked Singtel, GuLoader Attacks on Industrial Firms, LastPass Phishing Campaign appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/in-other-news-china-hacked-singtel-guloader-attacks-on-industrial-firms-phone-use-warning-in-us-agency/
-
Taiwanese Facebook Biz Pages Fall to Infostealer Phishing Campaign
Tags: phishingFirst seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/facebook-businesses-targeted-infostealer-phishing-campaign
-
New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus
Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts.The “intriguing” campaign, codenamed CRON#TRAP, starts with a malicious Windows shortcut (LNK) file likely distributed in the form of a ZIP archive via a phishing email.”What makes…
-
Beware of phishing emails delivering backdoored Linux VMs!
Unknown attackers are trying to trick Windows users into spinning up a custom Linux virtual machine (VM) with a pre-configured backdoor, Securonix res… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/05/phishing-oneamerica-survey-linux-vm-backdoor/
-
Novel phishing campaign targets Windows systems with malicious Linux VMs
First seen on scworld.com Jump to article: www.scworld.com/brief/novel-phishing-campaign-targets-windows-systems-with-malicious-linux-vms
-
22,000 IPs Taken Down in Global Cybercrime Crackdown
Over 22,000 malicious IPs were taken down in a law enforcement operation against phishing, infostealers, and ransomware. The post 22,000 IPs Taken Dow… First seen on securityweek.com Jump to article: www.securityweek.com/22000-ips-taken-down-in-global-cybercrime-crackdown/
-
Scammers Use DocuSign API to Evade Spam Filters with Phishing Invoices
First seen on hackread.com Jump to article: hackread.com/scammers-docusign-api-spam-filters-phishing-invoices/
-
Phishing mit QR-Codes Quishing unter der Lupe
In Anlehnung an Albert Einstein ließe sich wohl sagen, dass der kriminelle Einfallsreichtum der Menschen unendlich ist. Der neueste Trend Quishing beweist jedenfalls einmal wieder, dass die Cyberkriminellen keine Möglichkeit auslassen. Die Experten von Sophos-X-Ops haben sich den neuesten Hype der Infiltration über QR-Codes genauer angesehen. Wenn Cyberkriminelle ihre Phishing-Methoden mit eigentlich ganz harmlosen QR-Codes…
-
Industrial companies in Europe targeted with GuLoader
A recent spear-phishing campaign targeting industrial and engineering companies in Europe was aimed at saddling victims with the popular GuLoader downloader and, ultimately, a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/07/industrial-europe-spear-phishing-guloader/
-
North Korean hackers employ new tactics to compromise crypto-related businesses
North Korean hackers are targeting crypto-related businesses with phishing emails and novel macOS-specific malware. The crypto-related phishing campaign Since July 2024, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/07/north-korean-crypto-related-phishing/
-
Nigerian Handed 26-Year Sentence for Real Estate Phishing Scam
A US district court sentenced a Nigerian man for an elaborate ‘man-in-the-middle’ phishing campaign, which resulted in $12m in losses from real-estate… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nigerian-sentence-real-estate/
-
SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims
An ongoing phishing campaign is employing copyright infringement-related themes to trick victims into downloading a newer version of the Rhadamanthys information stealer since July 2024.Cybersecurity firm Check Point is tracking the large-scale campaign under the name CopyRh(ight)adamantys. Targeted regions include the United States, Europe, East Asia, and South America.”The campaign First seen on thehackernews.com Jump…
-
Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials
Cybersecurity researchers have warned of a spike in phishing pages created using a website builder tool called Webflow, as threat actors continue to a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cybercriminals-use-webflow-to-deceive.html
-
Bundestag testet IT-Sicherheit: Phishing-Mail stellt Politiker auf die Probe
First seen on golem.de Jump to article: www.golem.de/news/bundestag-testet-it-sicherheit-phishing-mail-stellt-politiker-auf-die-probe-2410-190210.html
-
DocuSign Abused to Deliver Fake Invoices
Cybercriminals are abusing DocuSign APIs to send bogus email messages that bypass protections such as spam and phishing filters. The post DocuSign Abu… First seen on securityweek.com Jump to article: www.securityweek.com/docusign-apis-abused-to-deliver-fake-invoices/
-
Nigerian man Sentenced to 26+ years in real estate phishing scams
Nigerian Kolade Ojelade gets 26 years in U.S. for phishing scams that stole millions by hacking email accounts. A Nigerian national was sentenced to 2… First seen on securityaffairs.com Jump to article: securityaffairs.com/170561/cyber-crime/nigerian-man-26-years-jail-phishing-scams.html
-
Ongoing Phishing Attack in LATAM Region
A sophisticated phishing campaign is currently targeting users in the Latin America (LATAM) region. Cybercriminals are employing a multi-layered approach to bypass security measures and deceive victims into compromising sensitive... First seen on securityonline.info Jump to article: securityonline.info/ongoing-phishing-attack-in-latam-region/