Tag: phishing
-
GitHub phishing campaign wipes repos, extorts victims
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/github-phishing-campaign-wipes-repos-extorts-victims
-
Phishing emails abuse Windows search protocol to push malicious scripts
A new phishing campaign uses HTML attachments that abuse the Windows search protocol (search-ms URI) to push batch files hosted on remote servers that… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phishing-emails-abuse-windows-search-protocol-to-push-malicious-scripts/
-
New phishing toolkit uses PWAs to steal login credentials
A new phishing kit has been released that allows red teamers and cybercriminals to create progressive web Apps (PWAs) that display convincing corporat… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-phishing-toolkit-uses-pwas-to-steal-login-credentials/
-
Remcos RAT Distributed As UUEncoding (UUE) File To Steal Logins
Researchers identified a campaign distributing Remcos RAT, a Remote Access Trojan, where the attack uses phishing emails disguised as legitimate busin… First seen on gbhackers.com Jump to article: gbhackers.com/remcos-rat-uuencoding-theft/
-
Africa Ranks Low on Phishing Cyber Resilience
As threats to Africa’s cybersphere continue to grow, the continent faces high risks to its society and economy with a growing cyber skills gap and lac… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/africa-ranks-low-on-phishing-cyber-resilience
-
Updated Agent Tesla variant deployed in new phishing campaign
Tags: phishingFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/updated-agent-tesla-variant-deployed-in-new-phishing-campaign
-
Abfluss kritischer Daten: Hacker waren wohl mindestens zwei Wochen im Netz der CDU
Ermöglicht wurde der Angriff angeblich durch eine Sicherheitslücke in einem Security Gateway von Check Point – kombiniert mit einer Phishing-Attacke. … First seen on golem.de Jump to article: www.golem.de/news/abfluss-kritischer-daten-hacker-waren-wohl-mindestens-zwei-wochen-im-netz-der-cdu-2406-185727.html
-
Gitloker attacks abuse GitHub notifications to push malicious oAuth apps
Threat actors impersonate GitHub’s security and recruitment teams in phishing attacks to hijack repositories using malicious OAuth apps in an ongoing … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/gitloker-attacks-abuse-github-notifications-to-push-malicious-oauth-apps/
-
New Phishing Campaign Uses Stealthy JPGs to Drop Agent Tesla
Tags: phishingFirst seen on hackread.com Jump to article: hackread.com/phishing-campaign-stealthy-jpgs-drop-agent-tesla/
-
Phishing-Kampagne: Betrüger ködern Studenten mit kostenlosem Klavier
Tags: phishingFirst seen on golem.de Jump to article: www.golem.de/news/phishing-kampagne-betrueger-koedern-studenten-mit-kostenlosem-klavier-2406-185678.html
-
Bolster, creator of the CheckPhish phishing tracker, raises $14M led by Microsoft’s M12
A dodgy email containing a link that looks legit but is actually malicious remains one of the most dangerous, yet successful, tricks in a cybercrimina… First seen on techcrunch.com Jump to article: techcrunch.com/2024/05/22/bolster-creator-of-the-checkphish-phishing-tracker-raises-14m-led-by-microsofts-m12/
-
FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine
Cloudflare on Thursday said it took steps to disrupt a month-long phishing campaign orchestrated by a Russia-aligned threat actor called FlyingYeti ta… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/flyingyeti-exploits-winrar.html
-
Sticky Werewolf Weaponizing LNK Files Group Attacking To Attack Organizations
Sticky Werewolf, a cyber threat group, has shifted its targeting strategy from sending phishing emails with download links to malicious files to using… First seen on gbhackers.com Jump to article: gbhackers.com/sticky-werewolf-lnk-files-attacks/
-
Phishing-Angriffe bleiben in Deutschland weiterhin ein großes Problem
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/phishing-angriffe-bleiben-in-deutschland-weiterhin-ein-grosses-problem
-
Klarna-Kunden im Visier von Cyberkriminellen: Wie ihr die fiese Phishing-Masche erkennt
Tags: phishingFirst seen on t3n.de Jump to article: t3n.de/news/klarna-kunden-cyberkriminelle-phishing-1625678/
-
Erpresser übernehmen GitHub-Repositories, greifen Daten ab und löschen Inhalte
Hacker haben vermutlich über Phishing GitHub-Zugangsdaten abgegriffen, die Inhalte der Repositories kopiert und gelöscht und dann die Betroffenen erpr… First seen on heise.de Jump to article: www.heise.de/news/Erpresser-uebernehmen-GitHub-Repositories-greifen-Daten-ab-und-loeschen-Inhalte-9751516.html
-
Cybersicherheitstrainings sind effektiv
Der weltweit größte Anbieter von Security-Awareness-Trainings und simulierten Phishing-Tests, KnowBe4, veröffentlicht die Ergebnisse des Phishing-Benc… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/06/05/cybersicherheitstrainings-sind-effektiv/
-
Analyse: Phishing-Kit V3B ist auf Commerzbank, Sparkasse & Co. zugeschnitten
Tags: phishingFirst seen on heise.de Jump to article: www.heise.de/news/Analyse-Phishing-Kit-V3B-ist-auf-Commerzbank-Sparkasse-Co-zugeschnitten-9748842.html
-
Attacks with V3B phishing kit set sights on EU banking customers
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/attacks-with-v3b-phishing-kit-set-sights-on-eu-banking-customers
-
Hackers Attacking Banking Customers Using Phishing-As-A-Service V3B Toolkit
A cybercriminal group is selling and distributing a sophisticated phishing kit called >>V3B
-
Beware Of Phishing Emails Prompting Execution Via Paste (CTRL+V)
Phishing attackers are distributing malicious HTML files as email attachments, containing code designed to exploit users by prompting them to directly… First seen on gbhackers.com Jump to article: gbhackers.com/phishing-emails-paste-execution/
-
Illinois Secretary of State’s office impacted by phishing incident
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/illinois-secretary-of-states-office-impacted-by-phishing-incident
-
New V3B Phishing Kit Steals Logins and OTPs from EU Banking Users
First seen on hackread.com Jump to article: hackread.com/v3b-phishing-kit-steals-logins-otps-eu-banking-users/
-
Identitätsdiebstahl auf Instagram und Facebook ist laut einer Social-Media-Umfrage von KnowBe4 besorgnisserregend
Der Anbieter der weltweit größten Plattform für Security Awareness Training und Phishing-Simulationen, KnowBe4, veröffentlicht die Ergebnisse seiner … First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/06/04/identitaetsdiebstahl-auf-instagram-und-facebook-ist-laut-einer-social-media-umfrage-von-knowbe4-besorgnisserregend/
-
Cybersecurity Training Reduces Phishing Threats With Numbers to Prove It
Train people. It makes a difference. In organizations without security awareness training, 34% of employees are likely to click on malicious links or … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/cybersecurity-training-reduces-phishing-threats-with-numbers-to-prove-it/
-
New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI
Cybersecurity researchers are alerting of phishing campaigns that abuse Cloudflare Workers to serve phishing sites that are used to harvest users’ cre… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/new-tricks-in-phishing-playbook.html
-
Report: The Dark Side of Phishing Protection
The transition to the cloud, poor password hygiene and the evolution in webpage technologies have all enabled the rise in phishing attacks. But despit… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/report-dark-side-of-phishing-protection.html
-
GoogleManager: Phishing-Tests bringen nichts und nerven Mitarbeiter
Mitarbeiter fühlten sich durch Phishing-Simulationen oftmals hintergangen, erklärt ein Security-Experte. Dadurch werde das Vertrauen in die Sicherheit… First seen on golem.de Jump to article: www.golem.de/news/google-security-manager-phishing-tests-bringen-nichts-und-nerven-mitarbeiter-2405-185435.html
-
One Phish, Two Phish, Red Phish, Blue Phish
Tags: phishingFirst seen on hackread.com Jump to article: hackread.com/one-phish-two-phish-red-phish-blue-phish/