eSecurity Planet

OCTOBER 22, 2024

These malware scams lure individuals with fake conference invitations designed to mimic legitimate meeting requests and exploit users’ trust. These groups are considered sub-teams of larger cryptocurrency scam networks, highlighting the organized and systematic nature of these phishing attacks.

Scams 124

Scams Malware Phishing Social Engineering 124

SecureWorld News

DECEMBER 4, 2024

Brands, particularly major retailers like those analyzed, invest significantly in protecting themselves and their customers from scams and cyberattacks, and often step up those measures for the holiday period. This makes it easier to spot and shut down fake accounts and copycat websites.

Retail 115

Retail Scams Phishing Cyber threats 115

Malwarebytes

MARCH 31, 2025

Were forever investigating new scams here at Malwarebytes, and so we get how hard it is to know whator whoto trust online. Theres the scam that takes advantage of grieving people and tricks them into paying for a funeral live stream. How to protect yourself from scams Watch out for a false sense of urgency. No exceptions.

Scams 139

Scams Passwords Accountability Password Management 139

Krebs on Security

APRIL 28, 2020

You may have heard that today’s phone fraudsters like to use use caller ID spoofing services to make their scam calls seem more believable. “After we figured out what was going on, we were left asking ourselves how the crooks had obtained her last three transactions without breaking into her account online. .

Scams 363

Scams Banking Accountability Financial Services 363

Krebs on Security

APRIL 14, 2019

The ne’er-do-well who set up the account below has been paying $550 a month for a Land Lordz “basic plan” subscription at landlordz[.]site site that helps him manage more than 500 scam properties and interactions with up to 100 (soon-to-be-scammed) “guests” looking to book the fake listings.

Scams 270

Scams Advertising Accountability Phishing 270

Krebs on Security

JUNE 6, 2023

One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to constantly create large numbers of new throwaway email accounts. The service in question — kopeechka[.]store ” “Are you working on large volumes and are costs constantly growing? The service in question — kopeechka[.]store

Accountability 253

Accountability Scams Cryptocurrency Advertising 253

Krebs on Security

MARCH 10, 2020

FBI officials last week arrested a Russian computer security researcher on suspicion of operating deer.io , a vast marketplace for buying and selling stolen account credentials for thousands of popular online services and stores. also is a favored marketplace for people involved in selling phony social media accounts.

Accountability 339

Accountability Advertising Hacking Cybercrime 339

Krebs on Security

NOVEMBER 21, 2024

The targeted SMS scams asked employees to click a link and log in at a website that mimicked their employer’s Okta authentication page. Some SMS phishing messages told employees their VPN credentials were expiring and needed to be changed; other phishing messages advised employees about changes to their upcoming work schedule. .”

Identity Theft 250

Identity Theft Phishing Cryptocurrency Accountability 250

Adam Levin

OCTOBER 8, 2019

The FBI is warning businesses about a new series of cyberattacks that can circumvent multi-factor authentication (MFA). In a Private Industry Notification (PIN), the FBI warned businesses that “cyber actors” had been observed, “circumventing multi-factor authentication through common social engineering and technical attacks.”

Authentication 210

Authentication Cyber Attacks Social Engineering Engineering 210

Krebs on Security

AUGUST 1, 2018

What’s interesting about the incident is that it showcases once again why relying on mobile text messages (SMS) for two-factor authentication (2FA) can lull companies and end users into a false sense of security. APP-BASED AUTHENTICATION. “We point this out to encourage everyone here to move to token-based 2FA.”

Authentication 226

Authentication Mobile Passwords Accountability 226

Malwarebytes

OCTOBER 15, 2024

Political ads could be hiding online scams, many people feel, and the election, they say, will likely fall victim to some type of “cyber interference.” 52% are “very concerned” or “concerned” about “falling prey to a scam when interacting with political messages.” The reasons could be obvious.

Scams 138

Scams Identity Theft Cybercrime Accountability 138

Adam Levin

NOVEMBER 17, 2020

Here are 50 ways to avoid getting scammed on Black Friday — and beyond. Credit cards offer markedly better fraud protections than debit cards , which connect directly to your bank account. Virtual credit cards similarly allow online shoppers to mask their financial accounts. Vary login credentials across accounts.

Scams 243

Scams Retail Banking Passwords 243

Krebs on Security

FEBRUARY 18, 2025

Merrill has been studying the evolution of several China-based smishing gangs, and found that most of them feature helpful and informative video tutorials in their sales accounts on Telegram. Another important innovation is the use of mass-created Apple and Google user accounts through which these phishers send their spam messages.

Phishing 281

Phishing Mobile Scams Banking 281

Krebs on Security

JANUARY 31, 2025

“The Saim Raza-run websites operated as marketplaces that advertised and facilitated the sale of tools such as phishing kits, scam pages and email extractors often used to build and maintain fraud operations,” the DOJ explained. “Presumably, these buyers also include Dutch nationals.

Phishing 251

Phishing Cybercrime Advertising Malware 251

The Last Watchdog

AUGUST 21, 2023

Phone number spoofing involves manipulating caller ID displays to mimic legitimate phone numbers, giving scammers a deceptive veil of authenticity. Related: The rise of ‘SMS toll fraud’ The Bank of America scam serves as a prime example of how criminals exploit this technique.

Scams 189

Scams Banking Accountability Authentication 189

Krebs on Security

MAY 29, 2021

Happily, identifying and tracking these fake reviewer accounts is often the easiest way to spot scams. Here’s the story of how bogus reviews on a counterfeit Microsoft Authenticator browser extension exposed dozens of other extensions that siphoned personal and financial data. Image: chrome-stats.com.

Accountability 356

Accountability Authentication Scams Software 356

Krebs on Security

NOVEMBER 21, 2020

The attacks were facilitated by scams targeting employees at GoDaddy , the world’s largest domain name registrar, KrebsOnSecurity has learned. In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com.

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

Malwarebytes

NOVEMBER 13, 2024

million complaints for a wide range of internet scams, resulting in $37.4 Brand impersonation scams This Black Friday and beyond, you’re likely to see scammers ripping off big name brands. Except in this scam we caught online, the website isn’t really Amazon—check out the URL. These scams are very common.

Scams 130

Scams Accountability Retail Advertising 130

SecureWorld News

FEBRUARY 3, 2025

Department of Justice (DOJ) , the seized domains were actively facilitating the sale of phishing kits, scam pages, and other fraud tools, which were then used by transnational organized crime groups to conduct business email compromise (BEC) schemes. According to the U.S.

Phishing 110

Phishing Cybercrime Scams Authentication 110

Adam Levin

SEPTEMBER 5, 2019

Some of the information out there was granular enough to allow a variety of scams, but the most serious is SIM-card swapping scams, where a criminal, armed with enough information about you, and most crucially your phone number, arranges to have your number moved to a phone in the criminal’s possession. . Monitor your accounts.

Scams 197

Scams Accountability Financial Services Insurance 197

Malwarebytes

MAY 16, 2024

More and more websites and services are making multi-factor-authentication (MFA) mandatory, which makes it much harder for cybercriminals to access your accounts. But as security evolves, so do cybercriminals who are always looking for new ways to scam us. That’s a great thing. The user is then prompted for their MFA step.

Authentication 145

Authentication Phishing Password Management Scams 145

Schneier on Security

AUGUST 25, 2022

Here’s a phishing campaign that uses a man-in-the-middle attack to defeat multi-factor authentication: Microsoft observed a campaign that inserted an attacker-controlled proxy site between the account users and the work server they attempted to log into.

Phishing 353

Phishing Authentication Passwords Accountability 353

Krebs on Security

OCTOBER 13, 2021

It also shows that phishers are attempting to sign up for new Coinbase accounts by the millions as part of an effort to identify email addresses that are already associated with active accounts. Rather, the bad guys understood that any attempts to sign up using an email address tied to an existing Coinbase account would fail.

Passwords 362

Passwords Phishing Accountability Mobile 362

Malwarebytes

FEBRUARY 13, 2025

In May, 2024, the FBI warned about the increasing threat of cybercriminals using Artificial Intelligence (AI) in their scams. These often start with a call to users, claiming their Gmail account has been compromised. Monitor your accounts for signs of unauthorized access or data leaks.

Phishing 108

Phishing Artificial Intelligence Identity Theft Accountability 108

Malwarebytes

MARCH 20, 2025

In particular, we have previously detailed how Google advertiser accounts can be hijacked to create new malicious ads and perpetuate a vicious cycle leading to more compromised accounts. Each ad uses a unique domain name which does a redirect to more static domains dedicated to the fake Semrush and Google account login pages.

Scams 65

Scams Accountability Phishing Advertising 65

Krebs on Security

FEBRUARY 26, 2023

The general manager of Escrow.com found himself on the phone with one of the GoDaddy hackers, after someone who claimed they worked at GoDaddy called and said they needed him to authorize some changes to the account. One multifactor option — physical security keys — appears to be immune to these advanced scams.

Hacking 324

Hacking Social Engineering Phishing Scams 324

SecureWorld News

MARCH 20, 2025

March Madness is here, and while fans are busy filling out brackets and making last-minute bets, cybercriminals are running their own full-court presstargeting unsuspecting fans with phishing scams, fake betting apps, and credential-harvesting schemes. Awareness and vigilance.

Scams 80

Scams Social Engineering Mobile Phishing 80

Malwarebytes

JUNE 4, 2024

Some of those advertiser accounts have a fairly large footprint with several hundred ads. They are registered to advertisers based in the US and their websites look almost authentic. Certainly, there are victims that will answer the phone but the scam is much more effective when you are the one to initiate the call.

Scams 132

Scams Advertising Consumer Protection Mobile 132

Malwarebytes

JANUARY 10, 2024

We have seen several high-profile accounts that were taken over on X (formerly Twitter) only to be used for cryptocurrency related promotional activities, like expressing the approval of exchange-traded funds (ETFs). The @SECGov X account was compromised, and an unauthorized post was posted. .” You’re all set.

Accountability 112

Accountability Scams Hacking Cryptocurrency 112

Krebs on Security

MAY 5, 2021

After a user logs in, the link prompts them to install a malicious but innocuously-named app that gives the attacker persistent, password-free access to any of the user’s emails and files, both of which are then plundered to launch malware and phishing scams against others. Image: Proofpoint.

Accountability 350

Accountability Advertising Passwords Phishing 350

Krebs on Security

OCTOBER 1, 2021

Federal Communications Commission (FCC) is asking for feedback on new proposed rules to crack down on SIM swapping and number port-out fraud, increasingly prevalent scams in which identity thieves hijack a target’s mobile phone number and use that to wrest control over the victim’s online identity.

Wireless 343

Wireless Mobile Passwords Authentication 343

Malwarebytes

MARCH 17, 2025

Other passwords and session tokens that could allow the scammers to bypass multi-factor authentication (MFA). Work with them to take the necessary steps to protect your identity and your accounts. IOCs Below are some recent examples of domains involved in this type of scam and the reason why Malwarebytes products block them.

Malware 138

Malware Adware Education Phishing 138

Malwarebytes

FEBRUARY 7, 2024

First Facebook scam Translation: Deadly accident on highway causes several fatalities Notable about this one is that it was posted as a fundraiser and so does not allow comments, which blocks me from posting a warning that this is a scam. These apps would then spread further from the compromised user account.

Scams 140

Scams Passwords Accountability VPN 140

Malwarebytes

MARCH 29, 2021

Suppose that, out of the blue, a Steam user tells you they’ve accidentally reported you for something you didn’t do, like making an illegal purchase, and that your Steam account is going to be suspended. There are some scams on Steam which have stood the test of time. The Steam scam playthrough. What do you do?

Scams 145

Scams Accountability Social Engineering Passwords 145

Krebs on Security

AUGUST 30, 2022

The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. Image: Cloudflare.com. Image: Cloudflare.com. 2, and Aug. According to an Aug.

Mobile 339

Mobile Phishing Authentication Accountability 339

Krebs on Security

MAY 30, 2023

The unsuspecting Discord members click the link provided by the compromised administrator account, and are asked to connect their crypto wallet to the scammer’s site, where it asks for unlimited spend approvals on their tokens, and subsequently drains the balance of any valuable accounts.

Hacking 339

Hacking Accountability Scams Cryptocurrency 339

Hacker's King

JANUARY 1, 2025

You may also like to read: Instagram Hacked: Top 5 Ways to Protect Your Account Ways to Secure Your Twitter Account Set a Strong Password - Setting a strong password is the very first step to secure your Twitter account. Enable Two-Factor Authentication - Adding Two-Factor Authentication means adding an extra layer of security.

Accountability 52

Accountability Hacking Passwords Scams 52