Krebs on Security

NOVEMBER 10, 2021

” The remarkable aspect of these phone-based phishing scams is typically the attackers never even try to log in to the victim’s bank account. We don’t know what the fraudsters behind this clever hybrid SMS/voice phishing scam intended to do with the information they might have coaxed from Stevens’ daughter.

Banking 363

Banking Phishing Scams Accountability 363

Adam Levin

JULY 10, 2020

2020 is on the path to becoming a record-breaking year for data breaches and compromised personal data. billion records have already been exposed, and that’s only accounting for the first quarter of 2020. The post 2020 Likely To Break Records for Breaches appeared first on Adam Levin.

Data breaches 252

Data breaches Social Engineering Antivirus Scams 252

Krebs on Security

SEPTEMBER 16, 2020

authorities today announced criminal charges and financial sanctions against two Russian men accused of stealing nearly $17 million worth of virtual currencies in a series of phishing attacks throughout 2017 and 2018 that spoofed websites for some of the most popular cryptocurrency exchanges.

Cryptocurrency 362

Cryptocurrency Phishing Accountability Cybercrime 362

Krebs on Security

MAY 26, 2023

The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta , which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while monetizing traffic to those abusive domains.

Phishing 315

Phishing Malware 315

Krebs on Security

APRIL 4, 2024

The disclosure revealed a profitable network of phishing sites that behave and look like the real Privnote, except that any messages containing cryptocurrency addresses will be automatically altered to include a different payment address controlled by the scammers. A screenshot of the phishing domain privatemessage dot net.

Phishing 271

Phishing Cryptocurrency DDOS Internet 271

Troy Hunt

FEBRUARY 23, 2024

I've been getting a lot of those "your parcel couldn't be delivered" phishing attacks lately and if you're a human with a phone, you probably have been too. It's well into the 2020's and post COVID so I'm always expecting a parcel, because that's just how we buy stuff these days. which is it?

Phishing 362

Phishing Scams Banking Social Engineering 362

Tech Republic Security

JUNE 2, 2020

A Lookout study found that organizations could lose millions through the growing number of unmitigated mobile phishing attacks.

Mobile 209

Mobile Phishing 209

Troy Hunt

SEPTEMBER 17, 2020

As I started delving back through my own writing over the years, the picture became much clearer and it really crystallised just this week after I inadvertently landed on a nasty phishing site. In the end I broke it down into 3 Ps: padlocks, phishing and privacy. Here's the value proposition of a VPN in the modern era: 1.

VPN 362

VPN Phishing DNS Encryption 362

Tech Republic Security

JUNE 9, 2020

Phishing is on the rise, ransomware continues to be a threat, and email exploits are more popular than ever. Here are the email security risks, and what you can do about them, in 2020.

Phishing 195

Phishing Ransomware Risk 195

Krebs on Security

AUGUST 17, 2023

You’ve probably never heard of “ 16Shop ,” but there’s a good chance someone using it has tried to phish you. A 16Shop phishing page spoofing Apple and targeting Japanese users. Image: Akamai.com. The INTERPOL statement says the platform sold hacking tools to compromise more than 70,000 users in 43 countries.

Phishing 229

Phishing Passwords Internet Internet 229

Krebs on Security

FEBRUARY 26, 2023

But it’s worth revisiting how this group typically got in to targeted companies: By calling employees and tricking them into navigating to a phishing website. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. In a filing with the U.S.

Hacking 324

Hacking Social Engineering Phishing Scams 324

Krebs on Security

NOVEMBER 5, 2024

Since 2020, Binns has filed a flood of lawsuits naming various federal law enforcement officers and agencies — including the FBI , the CIA , and the U.S. However, in a 2020 lawsuit he filed against the CIA, Binns himself acknowledged having visited a previously ISIS-controlled area of Syria prior to moving to Turkey in 2017.

Cybercrime 274

Cybercrime Mobile Media Hacking 274

Krebs on Security

JUNE 13, 2020

A Google search for the term “privnotes” brings up a misleading paid ad for the phishing site privnotes.com, which is listed above the legitimate site — privnote.com. Privnote.com (the legit service) employs technology that encrypts all messages so that even Privnote itself cannot read the contents of the message.

Phishing 256

Phishing Encryption Internet Internet 256

Troy Hunt

OCTOBER 28, 2020

— NordVPN (@NordVPN) October 23, 2020 Ah, tricky! But let's also keep some perspective here; look at how many pixels are different between an "i" and an "l": Are we really saying we're going to combat phishing by relying on untrained eyes to spot 6 pixels being off in a screen of more than 2 million of them?! Poor Googie!

Phishing 363

Phishing Password Management Passwords Internet 363

SecureList

DECEMBER 9, 2021

In this study, we analyzed how long phishing pages survive as well as the signs they show when they become inactive. In addition to the general data, we provided a number of options for classifying phishing pages according to formal criteria and analyzed the results for each of them. Life cycle of phishing pages. Introduction.

Phishing 144

Phishing Hacking Engineering Scams 144

We Live Security

JULY 21, 2021

Cybercriminals may target the popular event with ransomware, phishing, or DDoS attacks in a bid to increase their notoriety or make money. The post Cybercriminals may target 2020 Tokyo Olympics, FBI warns appeared first on WeLiveSecurity.

DDOS 145

DDOS Phishing Ransomware Cybersecurity 145

SecureList

AUGUST 23, 2021

billion USD in 2021, which is slightly less than the total revenue in 2020 but still significantly above the pre-pandemic figures. In this report, we cover PC and mobile threats as well as various phishing schemes that capitalize on popular games. Pandemic-related statistics cover the period of January 2020 through June 2021.

Mobile 141

Mobile Adware Malware Phishing 141

Krebs on Security

AUGUST 14, 2020

It’s unclear when the intruders first breached R1’s networks, but the ransomware was unleashed more than a week ago, right around the time the company was set to release its 2nd quarter financial results for 2020. “The phishing emails the authors use are well-crafted,” Trend Micro wrote.

Ransomware 363

Ransomware Healthcare Insurance Phishing 363

The Last Watchdog

AUGUST 4, 2021

Yet as Black Hat USA 2021 returns today as a live event in Las Vegas, it remains so true that we can always be fooled — and that the prime vehicle for hornswoggling us remains phishing messages sent via business email. For a full drill down on how they’re doing this, please give the accompanying podcast a listen.

Phishing 203

Phishing Technology Passwords Mobile 203

The Hacker News

JUNE 13, 2024

Threat actors linked to North Korea have accounted for one-third of all the phishing activity targeting Brazil since 2020, as the country's emergence as an influential power has drawn the attention of cyber espionage groups.

Phishing 139

Phishing Financial Services Government Accountability 139

IT Security Guru

MARCH 1, 2023

Mobile phishing is an issue plaguing the masses and a growing concern for enterprises, particularly as 2022 had the highest percentage of mobile phishing encounter rates ever, according to Lookout ‘s Global State of Mobile Phishing report. have been exposed to at least one malicious phishing attack every quarter.

Mobile 129

Mobile Phishing Financial Services Insurance 129

Troy Hunt

OCTOBER 2, 2020

22% of breaches begin with phishing (DBIR 2020). Sponsored by: Tines. Submit suspicious emails and attachments to Phish.ly for free immediate analysis!

Firmware 335

Firmware Phishing Accountability 335

Security Affairs

MARCH 28, 2025

Grandoreiro Banking Trojan resurfaces, targeting users in Latin America and Europe in new phishing campaigns. Forcepoint X-Labs researchers warn of new phishing campaigns targeting Latin America and Europe in new phishing campaigns. Attackers also employ encrypted or password-protected files to evade security detection.

Banking 87

Banking Phishing Malware Passwords 87

Krebs on Security

JULY 29, 2021

TARGETED PHISHING. But the more insidious threat with hacked databases comes not from password re-use but from targeted phishing activity in the early days of a breach, when relatively few ne’er-do-wells have got their hands on a hot new hacked database. The targeted phishing message that went out to classicfootballshirts.co.uk

Passwords 363

Passwords Password Management Phishing Scams 363

Security Affairs

OCTOBER 24, 2021

Microsoft uncovered an extensive series of credential phishing campaigns that employed a custom phishing kit tracked as TodayZoo. Microsoft researchers uncovered a custom phishing kit, dubbed TodayZoo, that was used in an extensive series of credential phishing campaigns. com domain to send the phishing messages.

Phishing 140

Phishing Passwords Hacking Accountability 140

Krebs on Security

MAY 5, 2021

After a user logs in, the link prompts them to install a malicious but innocuously-named app that gives the attacker persistent, password-free access to any of the user’s emails and files, both of which are then plundered to launch malware and phishing scams against others.

Accountability 350

Accountability Advertising Passwords Phishing 350

Security Affairs

NOVEMBER 11, 2023

The Royal Malaysian Police announced the seizure of the notorious BulletProftLink phishing-as-a-service (PhaaS) platform. The Royal Malaysian Police announced to have dismantled the notorious BulletProftLink phishing-as-a-service (PhaaS) platform. The operation was first documented on OSINT Fans by Gabor Szathmari in October 2020.

Phishing 142

Phishing Cybercrime Advertising Hacking 142

Troy Hunt

APRIL 6, 2020

The Ultimate Tor Browser Guide for 2020 The Best VPN for China 2020 How to know if someone is watching you on your camera 5 Ways to Stay Protected from Advanced Phishing Threats How to Access Windows Remote Desktop Over the Internet What We Need To Know About Bluetooth Security The Best Internet Browser for 2020 Two-Factor Authentication: ?What

Advertising 309

Advertising Internet Internet VPN 309

Schneier on Security

FEBRUARY 11, 2022

Over 30,000 machines were running Windows 7 (out of support since January 2020). The initial breach came after a HSE staff member interacted with a malicious Microsoft Office Excel file attached to a phishing email; numerous subsequent alerts were not effectively investigated.

Antivirus 351

Antivirus Hacking Ransomware CISO 351

Krebs on Security

JUNE 15, 2024

0KTAPUS In August 2022, KrebsOnSecurity wrote about peering inside the data harvested in a months-long cybercrime campaign by Scattered Spider involving countless SMS-based phishing attacks against employees at major corporations. A Scattered Spider phishing lure sent to Twilio employees.

Hacking 333

Hacking Cybercrime Phishing Passwords 333

The Last Watchdog

MAY 24, 2021

In 2020, it saw 193 billion credential stuffing attacks globally, with 3.4 Meanwhile, threat actors’ siege on web applications surged 62 percent in 2020 vs. 2019: Akamai observed nearly 6.3 Q: The scale of ‘attacks’ in 2020 is astronomical: 6.3 I’ve known Ragan for a long time and greatly respect his work. It is astronomical.

Financial Services 178

Financial Services Passwords Media Accountability 178

Krebs on Security

AUGUST 30, 2022

A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices. 2, and Aug.

Mobile 339

Mobile Phishing Authentication Accountability 339

Krebs on Security

DECEMBER 29, 2020

With the ongoing disruption to life and livelihood wrought by the Covid-19 pandemic, 2020 has been a fairly horrid year by most accounts. In almost every category — from epic breaches and ransomware to cybercrime justice and increasingly aggressive phishing and social engineering scams — 2020 was a year that truly went to eleven.

Scams 308

Scams Social Engineering Cybercrime Advertising 308

Malwarebytes

AUGUST 18, 2021

Phishing scammers love well known brand names, because people trust them, and their email designs are easy to rip off. Google searches for DocuSign almost doubled during March 2020, and stayed there, as so many people around the world started working from home. We’ve included some examples of DocuSign phishing campaigns below.

Phishing 145

Phishing Password Management Passwords Accountability 145

Security Affairs

FEBRUARY 2, 2025

The HeartSender group has sold phishing tools to criminals since 2020, causing over $3 million in U.S. The Saim Raza group run multiple marketplaces that advertised and facilitated the sale of hacking and fraud tools, including malware, phishing kits and email extractors.

Cybercrime 108

Cybercrime Advertising Phishing Hacking 108

Krebs on Security

FEBRUARY 9, 2021

by sending a phishing email with a link to a new domain or even with images embedded that call out to a new domain). CVE-2021-24078 earned a CVSS Score of 9.8, which is about as dangerous as they come. The vulnerability, dubbed “ Zerologon ,” is a bug in the core “ Netlogon ” component of Windows Server devices.

DNS 339

DNS Backups Software Phishing 339

Krebs on Security

NOVEMBER 22, 2021

“According to this actor, he had originally intended to send his targets—all senior-level executives—phishing emails to compromise their accounts, but after that was unsuccessful, he pivoted to this ransomware pretext,” Abnormal’s Crane Hassold wrote. Source: FBI/IC3 2020 Internet Crime Report.

Scams 321

Scams Cybercrime Banking Identity Theft 321