Malwarebytes

SEPTEMBER 13, 2023

The consequences of last year's LastPass breach continue to be felt, with the latest insult to users coming in the form of a highly convincing phishing email. Armed with this data, attackers can send targeted phishing emails that attempt to steal the passwords needed to unlock the stolen password vaults.

Phishing 140

Phishing Accountability Passwords Password Management 140

Bleeping Computer

APRIL 13, 2023

Microsoft is warning of a phishing campaign targeting accounting firms and tax preparers with remote access malware allowing initial access to corporate networks. [.]

Phishing 117

Phishing Accountability Malware 117

Krebs on Security

APRIL 3, 2024

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “ The Manipulaters ,” a sprawling web hosting network of phishing and spam delivery platforms. Manipulaters advertisement for “Office 365 Private Page with Antibot” phishing kit sold on the domain heartsender,com.

Phishing 218

Phishing Cybercrime Malware Advertising 218

Troy Hunt

AUGUST 30, 2023

They'd observed a phishing campaign that had collected 68k credentials from unsuspecting victims and asked if HIBP may be used to help alert these individuals to their exposure. Last week I was contacted by CERT Poland. Data accumulated by the malicious activity spanned from October 2022 until just last week.

Phishing 339

Phishing Password Management Passwords Banking 339

Bleeping Computer

NOVEMBER 17, 2021

Researchers have observed a new phishing campaign primarily targeting high-profile TikTok accounts belonging to influencers, brand consultants, production studios, and influencers' managers. [.].

Phishing 136

Phishing Accountability 136

Krebs on Security

NOVEMBER 10, 2021

KrebsOnSecurity recently heard from a reader who said his daughter received an SMS that said it was from her bank, and inquired whether she’d authorized a $5,000 payment from her account. Since this seemed like a reasonable and simple request — and she indeed had an account at the bank in question — she responded, “NO.”

Banking 357

Banking Phishing Scams Accountability 357

Bleeping Computer

SEPTEMBER 6, 2023

A threat actor known as W3LL developed a phishing kit that can bypass multi-factor authentication along with other tools that compromised more than 8,000 Microsoft 365 corporate accounts. [.]

Phishing 103

Phishing Accountability Authentication 103

The Hacker News

MAY 2, 2024

Google on Thursday announced that passkeys are being used by over 400 million Google accounts, authenticating users more than 1 billion times over the past two years.

Accountability 111

Accountability Engineering Phishing Authentication 111

Malwarebytes

MAY 30, 2022

Intuit released a warning about a phishing email being sent to its customers. The phishing emails tell recipients that their account has been put on hold, and try to trick users into “validating their account” to release it again. Image of phishing email courtesy of Intuit. Intuit Inc. QuickBooks Support.

Phishing 131

Phishing Accountability Small Business Malware 131

Krebs on Security

FEBRUARY 1, 2021

Authorities in the United Kingdom have arrested a 20-year-old man for allegedly operating an online service for sending high-volume phishing campaigns via mobile text messages. ” SMS Bandits offered an SMS phishing (a.k.a. Image: osint.fans. “But on the telecom front they were using fairly sophisticated tactics.”

Phishing 323

Phishing Telecommunications Mobile Advertising 323

Tech Republic Security

APRIL 1, 2022

The post Phishing attacks exploit free calendar app to steal account credentials appeared first on TechRepublic. A credential harvesting campaign spotted by INKY at the end of February tried to lure its victims to Calendly, a legitimate and free online calendar app.

Phishing 138

Phishing Accountability 138

The Hacker News

SEPTEMBER 6, 2023

A previously undocumented "phishing empire" has been linked to cyber attacks aimed at compromising Microsoft 365 business email accounts over the past six years.

Phishing 99

Phishing Accountability Cyber Attacks Marketing 99

Krebs on Security

AUGUST 9, 2021

That was right after KrebsOnSecurity broke the news that someone had hacked BriansClub and siphoned information on 26 million stolen debit and credit accounts. com, and was wondering when the funds would be reflected in the balance of his account on the shop. Shortly after it came online as a phishing site last year, BriansClub[.]com

Phishing 354

Phishing Cybercrime Accountability Advertising 354

Security Affairs

NOVEMBER 18, 2021

Threat actors have launched a phishing campaign targeting more than 125 TikTok ‘Influencer’ accounts in an attempt to hijack them. Researchers from Abnormal Security uncovered a phishing scam aimed at hijacking at least 125 TikTok ‘Influencer’ accounts. SecurityAffairs – hacking, phishing ). Pierluigi Paganini.

Accountability 103

Accountability Phishing Media Scams 103

Bleeping Computer

SEPTEMBER 12, 2023

Microsoft says an initial access broker known for working with ransomware groups has recently switched to Microsoft Teams phishing attacks to breach corporate networks. [.]

Phishing 123

Phishing Ransomware Accountability 123

Tech Republic Security

APRIL 21, 2022

The post How phishing attacks are spoofing credit unions to steal money and account credentials appeared first on TechRepublic. Attackers are impersonating local credit unions to capture personal information and extract money, says Avanan.

Phishing 155

Phishing Accountability 155

Krebs on Security

SEPTEMBER 1, 2023

Domain names ending in “ US ” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. government, which is frequently the target of phishing domains ending in.US. US phishing domains.US This is noteworthy because.US is overseen by the U.S.

Phishing 229

Phishing Telecommunications Government DNS 229

Bleeping Computer

MARCH 4, 2024

The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks. [.]

Authentication 144

Authentication Phishing Accountability Hacking 144

Bleeping Computer

DECEMBER 5, 2021

A new phishing campaign has been targeting verified Twitter accounts, as seen by BleepingComputer. The phishing campaign follows Twitter's recent removal of the checkmark from a number of verified accounts, citing that these were ineligible for the legendary status, and verified in error. [.].

Phishing 97

Phishing Accountability 97

Bleeping Computer

FEBRUARY 12, 2024

A phishing campaign detected in late November 2023 has compromised hundreds of user accounts in dozens of Microsoft Azure environments, including those of senior executives. [.]

Accountability 118

Accountability Phishing 118

Krebs on Security

AUGUST 4, 2023

One frustrating aspect of email phishing is the frequency with which scammers fall back on tried-and-true methods that really have no business working these days. The file included in this phishing scam uses what’s known as a “right-to-left override” or RLO character.

Phishing 205

Phishing Scams Computers and Electronics Software 205

Malwarebytes

JULY 6, 2022

Verified Twitter accounts are once again under attack from fraudsters, with the latest phish attempt serving up bogus suspension notices. Hijacking verified accounts on any platform is a big win for fraudsters. It gives credibility to their scams, especially when the accounts have large followings. Be careful out there.

Accountability 84

Accountability Phishing Scams Authentication 84

Joseph Steinberg

DECEMBER 1, 2020

Social media users’ delight at receiving notification that their accounts have qualified for Verification (that is, receiving the often-coveted “blue check mark” that appears on the social media profiles of public figures) has become the latest target of criminal exploitation.

Media 246

Media Accountability Phishing Scams 246

Krebs on Security

MARCH 23, 2021

A phishing attack last week gave attackers access to email and files at the California State Controller’s Office (SCO), an agency responsible for handling more than $100 billion in public funds each year. Many attackers can do a great deal of damage with 24 hours of access to a user’s account. Source: sco.ca.gov. .

Phishing 281

Phishing Data breaches Accountability Technology 281

Krebs on Security

SEPTEMBER 16, 2020

authorities today announced criminal charges and financial sanctions against two Russian men accused of stealing nearly $17 million worth of virtual currencies in a series of phishing attacks throughout 2017 and 2018 that spoofed websites for some of the most popular cryptocurrency exchanges. million from 158 Poloniex users, and $1.17

Cryptocurrency 342

Cryptocurrency Phishing Accountability Cybercrime 342

Bleeping Computer

MAY 26, 2022

Tax software vendor Intuit has warned that QuickBooks customers are being targeted in an ongoing series of phishing attacks impersonating the company and trying to lure them with fake account suspension warnings. [.].

Phishing 116

Phishing Accountability Software 116

Bleeping Computer

JULY 29, 2021

Hackers have compromised an email marketing account belonging to the Chipotle food chain and used it to send out phishing emails luring recipients to malicious links. [.].

Marketing 129

Marketing Phishing Accountability Hacking 129

Security Boulevard

SEPTEMBER 6, 2023

A relatively unknown threat group that six years ago started with a custom tool used for bulk email spam is now running a massive operation selling a custom phishing kit that target corporate Microsoft 365 business email accounts. According to researchers with cybersecurity firm Group-IB, the group – which has gone to lengths to keep.

Phishing 59

Phishing Accountability Cybersecurity Social Engineering 59

Bleeping Computer

JULY 26, 2022

A new phishing campaign codenamed 'Ducktail' is underway, targeting professionals on LinkedIn to take over Facebook business accounts that manage advertising for the company. [.].

Phishing 97

Phishing Accountability Advertising 97

Security Boulevard

DECEMBER 14, 2023

Microsoft seized parts of the infrastructure of a prolific Vietnam-based threat group that the IT giant said was responsible for creating as many as 750 million fraudulent Microsoft accounts that were then sold to other bad actors and used to launch a range of cyberattacks – from ransomware to phishing to identity theft – against.

Accountability 126

Accountability Identity Theft Phishing Ransomware 126

Bleeping Computer

MAY 3, 2022

Phishing emails increasingly target verified Twitter accounts with emails designed to steal their account credentials, as shown by numerous ongoing campaigns conducted by threat actors. [.].

Accountability 113

Accountability Phishing Risk 113

Heimadal Security

JULY 30, 2021

An email marketing account that belongs to the American chain of fast casual restaurants specializing in tacos Chipotle has been compromised by cybercriminals who used it to conduct a phishing campaign. Threat actors send out phishing emails in an attempt to convince their targets into clicking on malicious links.

Marketing 98

Marketing Phishing Accountability Cybersecurity 98

Heimadal Security

MAY 4, 2022

As evidenced by multiple ongoing operations carried out by cybercriminals, phishing emails are increasingly targeting verified Twitter accounts with emails intended to collect their login information. On Twitter, a blue tick next to a user’s name indicates that the account has been verified. The post Watch Out!

Accountability 95

Accountability Phishing Authentication Cybersecurity 95

Bleeping Computer

FEBRUARY 28, 2021

An AOL mail phishing campaign is underway to steal users' login name and password by warning recipients that their account is about to be closed. [.].

Phishing 138

Phishing Accountability Passwords 138

Security Affairs

JANUARY 22, 2024

Adaptive phishing campaigns are emerging as an increasingly sophisticated threat in the cybersecurity landscape. The phenomenon This phenomenon represents an evolution of traditional phishing tactics, as attackers seek to overcome defenses using more personalized and targeted approaches.

Phishing 113

Phishing Education Social Engineering Media 113

Bleeping Computer

FEBRUARY 3, 2022

Accounting and tax software provider Intuit has notified customers of an ongoing phishing campaign impersonating the company and trying to lure victims with fake warnings that their accounts have been suspended. [.].

Accountability 96

Accountability Phishing Software 96

Bleeping Computer

MARCH 7, 2024

An easy phishing attack using a Flipper Zero device can lead to compromising Tesla accounts, unlocking cars, and starting them. The attack works on the latest Tesla app, version 4.30.6, and Tesla software version 11.1 2024.2.7. [.]

Phishing 122

Phishing Accountability Software Technology 122