Tag: phishing
-
CISOs rethink the security organization for the AI era
Jill Knesek, CISO, BlackLine BlackLineEchoing Oleksak, Knesek says she feels strongly about utilizing traditional security and having the right controls in place. Getting foundational security right will get you a long way, she says.’Then, as you learn about more sophisticated attacks “¦ we’ll have to pivot our tooling and capabilities to those risks.” For now,…
-
Phishing is old, but AI just gave it new life
The volume of cyberattacks has reached staggering levels, with new tactics that blur the line between legitimate and malicious activity. A new threat report from Comcast, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/06/phishing-ai-enterprise-resilience-security/
-
Schnäppchen und Phishing voraus: Amazon Prime Day am 7. und 8. Oktober 2025
Tags: phishingFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/schnaeppchen-phishing-amazon-prime-day-7-8-oktober-2025
-
The Emperor’s New Clothes: Why Compulsory CBTs and Phishing Tests Keep Failing
Most phishing training, and indeed most compulsory computer-based training (CBT) modules, are largely ineffective in reducing incidents – and are therefore a waste of time and resources. Finally we have the data we need to challenge this, and find a better path to user awareness that may actually reduce the frequency and impact of cyber…
-
Generation Z führt die Liste der Opfer von Phishing-Angriffen an
Zum Cybersecurity Awareness Month hat Yubico die Ergebnisse seiner jährlichen internationalen Umfrage vorgestellt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cloud-security/generation-z-der-opfer-phishing-angriffe
-
SideWinder Hacker Group Targets Users with Fake Outlook/Zimbra Portals to Steal Login Credentials
Tags: apt, credentials, cyber, defense, government, group, hacker, infrastructure, login, malicious, phishingThe notorious SideWinder APT group has intensified its credential harvesting operations across South Asia, deploying sophisticated phishing campaigns that target government, defense, and critical infrastructure organizations through fake webmail portals. The campaign represents a significant escalation from the group’s August 2024 activities, which initially focused on 14 malicious webpages hosted on Netlify and pages.dev platforms.…
-
New ‘PointClick’ Phishing Kit Evades Security Filters to Deliver Malicious Payloads
A new toolkit named Impact Solutions has emerged on cybercrime forums, offering a comprehensive, user-friendly framework for crafting advanced phishing campaigns. By democratizing malware delivery, Impact Solutions empowers even low-skill threat actors to bypass both end users and conventional security filters, delivering malicious payloads via seemingly innocuous attachments. This article explores the mechanics of Impact…
-
KI-generierte Phishing-Mails werden immer besser so kannst du dich dennoch schützen
First seen on t3n.de Jump to article: t3n.de/news/ki-generierte-phishing-mails-schuetzen-1707881/
-
Von wegen Enkeltrick: Diese Zielgruppe ist überraschend anfällig für Phishing-Mails
First seen on t3n.de Jump to article: t3n.de/news/phishing-anfaellig-genz-betrug-1709721/
-
Silent Smishing: Abuse of Cellular Router APIs in Phishing Campaigns
Attackers exploit vulnerable cellular routers to send large-scale smishing messages that bypass traditional defenses. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/silent-smishing-abuse-of-cellular-router-apis-in-phishing-campaigns/
-
Cryptohack Roundup: White House Pulls CFTC Chair Nom
Also: Texas Brothers Charged in $8M Crypto-Linked Kidnapping Case. This week, Brian Quintenz won’t lead the U.S. CFTC, Canada fined KuCoin $14M, Texas brothers charged in an $8M kidnapping case, South Korean actor given suspended sentence for embezzlement, phishing campaign used robots.txt and an ex-LASD deputy pleaded guilty in a business extortion scam. First seen…
-
Neue Phishing-Variante greift Gmail-Nutzer an
Tags: access, adobe, awareness, cio, ciso, cyberattack, hacker, intelligence, mail, malware, phishing, ransomware, risk, spear-phishing, threat, tool, zero-trustHacker haben gefälschte PDF-Dateien an Gmail-Nutzer verschickt, die täuschend echt wirken. Forscher des Sicherheitsunternehmens Varonis haben eine raffinierte Phishing-Methode entdeckt, die auf Gmail-Nutzer zielt. Dabei kommt eine Malware zum Einsatz, die sich nicht nur als PDF-Anhang tarnt, sondern die Opfer automatisch dazu auffordert, diesen zu öffnen.’Der Dateityp .PDF ist im privaten und geschäftlichen Bereich allgegenwärtig…
-
Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware
The threat actor known as Confucius has been attributed to a new phishing campaign that has targeted Pakistan with malware families like WooperStealer and Anondoor.”Over the past decade, Confucius has repeatedly targeted government agencies, military organizations, defense contractors, and critical industries — especially in Pakistan using spear-phishing and malicious documents as initial First seen on…
-
Phishing Is Moving From Email to Mobile. Is Your Security?
With SMS, voice, and QR-code phishing incidents on the rise, it’s time to take a closer look at securing the mobile user. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/phishing-moving-email-mobile-is-your-security
-
Phishing Is Moving From Email to Mobile. Is Your Security?
With SMS, voice, and QR-code phishing incidents on the rise, it’s time to take a closer look at securing the mobile user. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/phishing-moving-email-mobile-is-your-security
-
Die Shopping-Aktionstage von Amazon werden bereits von Phishing-Mails und hunderten bösartigen Domains überschattet.
Check Point Software Technologies hat im Vorfeld des kommenden Amazon-Prime-Day am 7. und 8. Oktober Phishing-Betrügereien, gefälschte Domains und bösartige E-Mails im Zusammenhang mit den Shopping-Aktionstagen beobachtet. Der mehrmals im Jahr von Amazon ausgerufene Prime-Day bietet Prime-Kunden zahlreiche Exklusiv-Angebote und wird wegen seiner Popularität von Cyberkriminellen regelmäßig für neue Angriffswinkel und Betrugsmaschen ausgenutzt. Ziel ist…
-
Malicious ZIP Files Use Windows Shortcuts to Drop Malware
Cybersecurity firm Blackpoint Cyber reveals a new spear phishing campaign targeting executives. Learn how attackers use fraudulent document ZIPs containing malicious shortcut files, leveraging ‘living off the land’ tactics, and a unique Anti-Virus check to deliver a custom payload First seen on hackread.com Jump to article: hackread.com/malicious-zip-files-windows-shortcuts-malware/
-
Phishing Dominates EU-Wide Intrusions, says ENISA
ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/phishing-dominates-euwide/
-
That annoying SMS phish you just got may have come from a box like this
Smishers looking for new infrastructure are getting creative. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/10/that-annoying-sms-phish-you-just-got-may-have-come-from-a-box-like-this/
-
Fake Google Careers Recruiters Target Gmail Users in Phishing Scam
Phishing emails posing as Google recruiters steal Gmail logins, exploiting Salesforce spoofing and Cloudflare to bypass defenses. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/google-careers-phishing-scheme/
-
New MatrixPDF toolkit turns PDFs into phishing and malware lures
A new phishing and malware distribution toolkit called MatrixPDF allows attackers to convert ordinary PDF files into interactive lures that bypass email security and redirect victims to credential theft or malware downloads. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-matrixpdf-toolkit-turns-pdfs-into-phishing-and-malware-lures/
-
Smishing Campaigns Exploit Cellular Routers to Target Belgium
New smishing attacks exploit Milesight routers to send phishing texts targeting Belgian users First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/smishing-exploit-cellular-routers/
-
New Smish: New York Department of Revenue
As I was visiting SmishTank to report the most recent SMish that I had received (an iMessage from a +27 South African telephone number claiming to be from ParkMobile) I noticed there had been many recent submissions from the New York Department of Revenue. SmishTank is operated by Professor Muhammad Lutfor Rahman, a colleague of mine…
-
Hackers Posing as Google Careers Recruiter to Steal Gmail Login Details
An emerging phishing campaign is targeting job seekers by masquerading as Google Careers recruiters, delivering seemingly legitimate emails that lead victims to malicious sites designed to harvest Gmail credentials. Security researchers have uncovered a sophisticated multi-stage attack that leverages Salesforce infrastructure, Cloudflare protection and WebSocket command-and-control to manipulate victims into surrendering sensitive information. The phishing…
-
Generation Z führt die Liste der Opfer von Phishing-Angriffen an
Angesichts der wachsenden Unsicherheit im Zusammenhang mit künstlicher Intelligenz (KI) und der zunehmenden Zahl von Cybersicherheits-verletzungen hat Yubico, der führende Anbieter von Hardware-Authentifizierungssicherheitsschlüsseln, pünktlich zum Cybersecurity-Awareness-Month im Oktober die Ergebnisse seiner jährlichen Umfrage zum globalen Stand der Authentifizierung veröffentlicht. Die von Yubico in Auftrag gegebene und von Talker Research durchgeführte Umfrage sammelte Erkenntnisse von 18.000…
-
Generation Z führt die Liste der Opfer von Phishing-Angriffen an
Angesichts der wachsenden Unsicherheit im Zusammenhang mit künstlicher Intelligenz (KI) und der zunehmenden Zahl von Cybersicherheits-verletzungen hat Yubico, der führende Anbieter von Hardware-Authentifizierungssicherheitsschlüsseln, pünktlich zum Cybersecurity-Awareness-Month im Oktober die Ergebnisse seiner jährlichen Umfrage zum globalen Stand der Authentifizierung veröffentlicht. Die von Yubico in Auftrag gegebene und von Talker Research durchgeführte Umfrage sammelte Erkenntnisse von 18.000…