article thumbnail

Booking.com Phishers May Leave You With Reservations

Krebs on Security

This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. KrebsOnSecurity last week heard from a reader whose close friend received a targeted phishing message within the Booking mobile app just minutes after making a reservation at a California.

Phishing 237
article thumbnail

How to Lose a Fortune with Just One Bad Click

Krebs on Security

But when the thieves tried to move $100,000 worth of cryptocurrency out of his account, Coinbase sent an email stating that the account had been locked, and that he would have to submit additional verification documents before he could do anything with it. I put my seed phrase into a phishing site, and that was it.”

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Gmail blocked 18 Million phishing and malware emails using COVID-19 lures in a week

Security Affairs

Google says that the Gmail malware scanners have blocked around 18 million phishing and malware emails using COVID-19 lures in just one week. Google announced that its anti-malware solutions implemented to defend its Gmail users have blocked around 18 million phishing and malware emails using COVID-19 lures within the last seven days.

Phishing 145
article thumbnail

MailChimp breached, intruders conducted phishing attacks against crypto customers

Security Affairs

Threat actors gained access to internal tools of the email marketing giant MailChimp to conduct phishing attacks against crypto customers. Trezor WARNING: Elaborate Phishing attack. Trazor also took the phishing domain used by threat actors offline and launched an investigation to determine how many users have been impacted.

Phishing 140
article thumbnail

FBI: Spike in Hacked Police Emails, Fake Subpoenas

Krebs on Security

.” Echoing the FBI’s warning, Donahue said far too many police departments in the United States and other countries have poor account security hygiene, and often do not enforce basic account security precautions — such as requiring phishing-resistant multifactor authentication.

Hacking 256
article thumbnail

Microsoft Account Security Alert Email: Recognize the Scam

Security Boulevard

Reading Time: 5 min Have you received a microsoft account security alert email? Learn how to identify legitimate alerts and avoid phishing scams targeting your Microsoft account. The post Microsoft Account Security Alert Email: Recognize the Scam appeared first on Security Boulevard.

article thumbnail

Discord Shame channel goes phishing

Malwarebytes

Tips to keep your Discord account secure. Should you land on a regular phishing page and hand over login details, the attacker will still need your 2FA code to do anything with your account. The post Discord Shame channel goes phishing appeared first on Malwarebytes Labs. Enable two-factor authentication (2FA).

Phishing 104