Tag: social-engineering
-
North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn
The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of cryptocurrency as part of social engineering campaigns orchestrated over a six-month period.These findings come from Microsoft, which said that multiple threat activity clusters with ties to the country have been observed creating fake profiles on…
-
5 Scattered Spider Gang Members Indicted in Multi-Million Dollar Cybercrime Scheme
Five alleged members of the infamous Scattered Spider cybercrime crew have been indicted in the U.S. for targeting employees of companies across the country using social engineering techniques to harvest credentials and using them to gain unauthorized access to sensitive data and break into crypto accounts to steal digital assets worth millions of dollars.All of…
-
‘ClickFix’ Cyber-Attacks for Malware Deployment on the Rise
Proofpoint researchers have observed the growing use of the ClickFix social engineering tactic, which lures people into running malicious content on their computer First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/clickfix-cyber-malware-rise/
-
APT Group DONOT Launches Cyberattack on Pakistan’s Maritime and Defense Industry
A new hacker collective, known as the APT group DONOT, has targeted critical sectors of Pakistan’s economy, specifically the maritime and defense manufacturing industries. By leveraging advanced malware and targeted social engineering strategies, the DONOT hacker group has successfully compromised sensitive infrastructure. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/apt-group-donot-targets-pakistan/
-
Black Basta Ransomware Leveraging Social Engineering For Malware Deployment
Black Basta, a prominent ransomware group, has rapidly gained notoriety since its emergence in 2022 by employing sophisticated social engineering techniques to infiltrate target networks, often leveraging advanced malware to compromise systems undetected. Once inside, Black Basta extorts victims with ransom demands, threatening to publicly release sensitive data if payment is not made. The group’s…
-
Langwierige, dafür aber extrem ausgefeilte Attacke auf VPN-Zugangsdaten
Ein neuer, ausgeklügelter Angriff nutzt Telefonanrufe, Social-Engineering, ähnlich aussehende Domains und gefälschte VPN-Websites von Unternehmen, um sich einen ersten Zugang zu einem Opfernetzwerk zu verschaffen. Dies ist einer der ausgefeiltesten Initial-Access-Attacks, die wir je gesehen haben. Die Sicherheitsanalysten von Guidepoint Security haben Details zu einem neuen Angriff veröffentlicht, bei dem Benutzer dazu verleitet werden, dem…
-
Social engineering scams sweep through financial institutions
North American financial institutions fielded 10 times more reports of social engineering scams in 2024 than they did a year ago, according to BioCatch. The data shows scams … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/13/financial-institutions-scams/
-
The changing face of identity security
It’s easy to see why identity security is often synonymous with user security. Social engineering tactics are the mainstay of the threat actor’s arsenal, and it’s rare to find … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/12/identity-security-strategy/
-
Warning: LastPass Alerts Users to Phishing Scam Using Fake Support Reviews on Chrome Web Store
LastPass, a leading password management platform, has issued a critical warning to users about a social engineering campaign targeting its customer ba… First seen on securityonline.info Jump to article: securityonline.info/warning-lastpass-alerts-users-to-phishing-scam-using-fake-support-reviews-on-chrome-web-store/
-
MoneyGram customer data breached in attack
MoneyGram confirms that customer data has been stolen in an incident that appears to have started with a social engineering attack on its IT helpdesk … First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366613195/MoneyGram-customer-data-breached-in-attack
-
Security Awareness – 4 Basis-Tipps gegen Social Engineering
First seen on security-insider.de Jump to article: www.security-insider.de/schutz-vor-social-engineering-sicherheitsmassnahmen-fuer-unternehmen-a-42ceb7170a2de8bb52275346e97c92c2/
-
Black Basta Ransomware Group Elevates Social Engineering with Microsoft Teams and Malicious QR Codes
The ReliaQuest Threat Research Team uncovered an intensified social engineering campaign tied to the ransomware group Black Basta. Known for using ema… First seen on securityonline.info Jump to article: securityonline.info/black-basta-ransomware-group-elevates-social-engineering-with-microsoft-teams-and-malicious-qr-codes/
-
Black Basta ransomware poses as IT support on Microsoft Teams to breach networks
The BlackBasta ransomware operation has moved its social engineering attacks to Microsoft Teams, posing as corporate help desks contacting employees t… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/black-basta-ransomware-poses-as-it-support-on-microsoft-teams-to-breach-networks/
-
Krypto-Millionenraub: Social-Engineering beschert Hackern 240 Millionen Dollar
First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/online-betrug/krypto-millionenraub-social-engineering-beschert-hackern-240-millionen-dollar-301749.html
-
Tapioca Foundation Offers $1M Bounty After $4.7M DeFi Heist
The Tapioca Foundation, a cryptocurrency project, has fallen victim to a sophisticated social engineering attack, resulting in the theft of $4.7 milli… First seen on securityonline.info Jump to article: securityonline.info/tapioca-foundation-offers-1m-bounty-after-4-7m-defi-heist/
-
GHOSTPULSE Hides Within PNG File Pixel Structure To Evade Detections
Recent campaigns targeting victims through social engineering tactics utilize LUMMA STEALER with GHOSTPULSE as its loader. By tricking victims into ex… First seen on gbhackers.com Jump to article: gbhackers.com/ghostpulse-png-evasion/
-
Insider Research im Gespräch – KI-gestütztes Social Engineering und menschliches Risikomanagement
First seen on security-insider.de Jump to article: www.security-insider.de/cybersecurity-ki-risiken-interview-dr-kraemer-a-7f401d7a182fe234b7de441bf02d4335/
-
KI-gestütztes Vishing als neue Herausforderung der Cybersicherheit
Die jüngste Demonstration von KI-unterstütztem Voice-Phishing (Vishing) während des ‘Social-Engineering Village, einer Veranstaltung im Rahmen der jäh… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/10/02/ki-gestuetztes-vishing-als-neue-herausforderung-der-cybersicherheit/
-
FBI: North Korean hackers targeting cryptocurrency employees
North Korean state-sponsored threat actors have been conducting successful social engineering campaigns against cryptocurrency employees over the last… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366609500/FBI-North-Korean-hackers-targeting-cryptocurrency-employees
-
Versuchter Social-Engineering-Angriff auf KnowBe4-Mitarbeiter erfolgreich abgewehrt
Vor kurzem wurde ein versuchter Social-Engineering-Angriff auf einen hochrangigen Mitarbeiter des international tätigen Unternehmens erfolgreich abgew… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/09/17/versuchter-social-engineering-angriff-auf-knowbe4-mitarbeiter-erfolgreich-abgewehrt/
-
New North Korean social-engineering campaign targets crypto sector
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/new-north-korean-social-engineering-campaign-targets-crypto-sector
-
New North Korean Social Engineering Campaign Targets Crypto Sector
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/new-north-korean-social-engineering-campaign-targets-crypto-sector
-
New Developer-As-A-Service In Hacking Forums Empowering Phishing And Cyberattacks
Tags: cloud, cyberattack, finance, group, hacking, infrastructure, insurance, phishing, ransomware, service, social-engineeringSCATTERED SPIDER, a ransomware group, leverages cloud infrastructure and social engineering to target insurance and financial institutions by using st… First seen on gbhackers.com Jump to article: gbhackers.com/daas-hacking-phishing/
-
FBI: North Korean Actors Readying Aggressive Cyberattack Wave
Sophisticated social engineering is expected to accompany threat campaigns that are highly targeted and aimed at stealing crypto and deploying malware… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/fbi-north-korean-actors-aggressive-cyberattack-wave
-
Evolving NPM Package Campaign Targets Roblox Devs, For Years
Attackers have added aggressive social engineering to their arsenal, along with a novel Windows-manipulating persistence mechanism that demands develo… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/evolving-npm-package-campaign-roblox-devs
-
From Russia >>not<< with love: Analyse einer ausgefeilten Social-Engineering-Kampagne
Innerhalb von 51 Tagen verschickte eine Gruppe von Angreifern, die vermutlich aus Russland stammt, mehr als 2.000 Phishing-E-Mails an fast 800 Unterne… First seen on news.sophos.com Jump to article: news.sophos.com/de-de/2024/06/13/from-russia-with-love-analyxe-einer-ausgefeilten-social-engineering-kampagne/
-
Old Habits, New Threats: Why More Phishing Attacks are Bypassing Outdated Perimeter Detection
The rise in sophisticated phishing threats like polymorphic attacks, social engineering tactics, and the use of compromised accounts have undoubtedly … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/old-habits-new-threats-why-more-phishing-attacks-are-bypassing-outdated-perimeter-detection/
-
North Korea Targets DeFi and Crypto Companies with Advanced Social Engineering Attacks
The FBI has warned sternly about North Korean state-sponsored hackers employing highly sophisticated social engineering tactics to infiltrate decentra… First seen on securityonline.info Jump to article: securityonline.info/north-korea-targets-defi-and-crypto-companies-with-advanced-social-engineering-attacks/
-
FBI: North Korea ramps up social engineering attacks against crypto firms
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/fbi-north-korea-ramps-up-social-engineering-attacks-against-crypto-firms
-
North Korean hackers’ social engineering tricks
>>North Korean malicious cyber actors conducted research on a variety of targets connected to cryptocurrency exchange-traded funds (ETFs) over the las… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/04/north-korean-hackers-social-engineering/