Krebs on Security

MARCH 31, 2020

A spear-phishing attack this week hooked a customer service employee at GoDaddy.com , the world’s largest domain name registrar, KrebsOnSecurity has learned. 49 (that domain is hobbled here because it is currently flagged as hosting a phishing site). It was starting to look like someone had gotten phished.

Phishing 328

Phishing DNS Social Engineering Accountability 328

eSecurity Planet

MARCH 8, 2022

Users looking to increase their security without the burden of remembering all those passwords typically turn to password managers to keep their accounts secure. Vault health reports Directory sync Secure password sharing. 1Password is a popular business password manager that encrypts data both at rest and in transit.

Password Management 131

Password Management Passwords Encryption Accountability 131

Thales Cloud Protection & Licensing

JANUARY 31, 2025

Level Up Your Security: Embrace Passkeys and Phishing-Resistant 2FA andrew.gertz@t Fri, 01/31/2025 - 15:17 Celebrate Change Your Password Day and 2FA Day by embracing passkeys and phishing-resistant 2FA. Redefining Change Your Password Day Well start with Change Your Password Day because, frankly, its a little complicated.

Phishing 62

Phishing Passwords Password Management Authentication 62

Tech Republic Security

MAY 20, 2020

LogMeIn is the parent company of LastPass, so attackers may also be attempting to access the password managers of compromised users, says Abnormal Security.

Password Management 208

Password Management Phishing Passwords 208

Krebs on Security

JULY 23, 2018

Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity. A YubiKey Security Key made by Yubico. a mobile device).

Phishing 240

Phishing Authentication Mobile Passwords 240

Krebs on Security

JULY 29, 2021

Much like WeLeakInfo and others operated before being shut down by law enforcement agencies, these services sell access to anyone who wants to search through billions of stolen credentials by email address, username, password, Internet address, and a variety of other typical database fields. TARGETED PHISHING. Don’t re-use passwords.

Passwords 363

Passwords Password Management Phishing Scams 363

Security Affairs

NOVEMBER 15, 2024

The malware could harvest a huge trove of data from infected systems, including cookies, autofill, cryptocurrency wallets, 2FA authenticators, password managers, and email client information. Gen Digital observed phishing campaigns distributing the Glove Stealer.

Encryption 116

Encryption Password Management Cryptocurrency Social Engineering 116

Bleeping Computer

JANUARY 26, 2023

Bitwarden and other password managers are being targeted in Google ads phishing campaigns to steal users' password vault credentials. [.]

Passwords 142

Passwords Phishing Password Management 142

Google Security

JANUARY 30, 2024

This is why the Pixel team has been especially excited about passkeys —the easier, safer alternative to passwords. Passkeys are safer because they’re unique to each account, and are more resistant against online attacks such as phishing. Google Password manager will incorporate these updates for other platforms in the future.

Password Management 120

Password Management Passwords Accountability Phishing 120

Troy Hunt

JANUARY 28, 2021

Ok, that's a bit wordy but the Exodus thing earlier today was frustrating, not because a screen cap of an alleged breach notice was indistinguishable from a phish, but because of the way some people chose to react when I shared the notice. Watch today's vid for an explanation on that one, there's that and a bunch more this week.

Password Management 282

Password Management Phishing IoT Data breaches 282

Malwarebytes

FEBRUARY 25, 2025

Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device cant be phished. Enable two-factor authentication (2FA).

Passwords 145

Passwords Password Management Phishing Authentication 145

Malwarebytes

MAY 16, 2024

A type of phishing we’re calling authentication-in-the-middle is showing up in online media. It works like this: A user gets lured to a phishing site masquerading as a site they normally use, such as a bank, email or social media account. Use a password manager. Use security software. Consider passkeys.

Authentication 145

Authentication Phishing Password Management Scams 145

Bleeping Computer

FEBRUARY 8, 2024

LastPass is warning that a fake copy of its app is being distributed on the Apple App Store, likely used as a phishing app to steal users' credentials. [.]

Password Management 135

Password Management Passwords Phishing 135

Malwarebytes

JANUARY 27, 2025

Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device cant be phished. Enable two-factor authentication (2FA).

Data breaches 127

Data breaches Healthcare Passwords Insurance 127

Malwarebytes

AUGUST 18, 2021

Phishing scammers love well known brand names, because people trust them, and their email designs are easy to rip off. Earlier this year, DocuSign specifically warned about phishing campaigns using its brand. We’ve included some examples of DocuSign phishing campaigns below. Real DocuSign emails used for phishing.

Phishing 145

Phishing Password Management Passwords Accountability 145

Krebs on Security

JUNE 15, 2024

0KTAPUS In August 2022, KrebsOnSecurity wrote about peering inside the data harvested in a months-long cybercrime campaign by Scattered Spider involving countless SMS-based phishing attacks against employees at major corporations. A Scattered Spider phishing lure sent to Twilio employees.

Hacking 334

Hacking Cybercrime Phishing Passwords 334

Troy Hunt

OCTOBER 28, 2020

But let's also keep some perspective here; look at how many pixels are different between an "i" and an "l": Are we really saying we're going to combat phishing by relying on untrained eyes to spot 6 pixels being off in a screen of more than 2 million of them?! That's a very different kettle of phish (sorry, couldn't help myself!)

Phishing 363

Phishing Password Management Passwords Internet 363

Malwarebytes

OCTOBER 25, 2024

Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished. Enable two-factor authentication (2FA).

Healthcare 119

Healthcare Data breaches Passwords Identity Theft 119

Malwarebytes

SEPTEMBER 13, 2023

The consequences of last year's LastPass breach continue to be felt, with the latest insult to users coming in the form of a highly convincing phishing email. Although the " unauthorized party" that compromised LastPass users' data was able to steal password vaults, it's likely that they are having a hard time cracking them open.

Phishing 144

Phishing Accountability Passwords Password Management 144

Security Affairs

MAY 13, 2024

Experts reported that since April, the Phorpiex botnet sent millions of phishing emails to spread LockBit Black ransomware. Password Management : Use strong, unique passwords and implement multi-factor authentication (MFA) whenever possible, prioritizing authentication apps or hardware tokens over SMS text-based codes.

Phishing 132

Phishing Ransomware Security Awareness Authentication 132

Malwarebytes

NOVEMBER 4, 2024

Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished. Enable two-factor authentication (2FA).

Data breaches 115

Data breaches Passwords Ransomware Phishing 115

Malwarebytes

MARCH 25, 2025

Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device cant be phished. Enable two-factor authentication (2FA).

Passwords 115

Passwords Accountability Data breaches Phishing 115

Malwarebytes

FEBRUARY 25, 2025

Given the field that DISA is active in, that information could interest cybercriminals for use as background information for targeted phishing attempts or extortion. Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Enable two-factor authentication (2FA).

Data breaches 98

Data breaches Passwords Phishing Password Management 98

Cisco Security

NOVEMBER 2, 2022

“ Cisco Duo simplifies the passwordless journey for organizations that want to implement phishing-resistant authentication and adopt a zero trust security strategy. “Over the last few years, we have increased our password complexities and required 2FA wherever possible. This prevents login to fake or phishing websites.

Authentication 144

Authentication Passwords Phishing Mobile 144

Malwarebytes

JANUARY 10, 2025

Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device cant be phished. Enable two-factor authentication (2FA).

Ransomware 97

Ransomware Data breaches Passwords Phishing 97

Krebs on Security

DECEMBER 1, 2022

ConnectWise , which offers a self-hosted, remote desktop software application that is widely used by Managed Service Providers (MSPs), is warning about an unusually sophisticated phishing attack that can let attackers take remote control over user systems when recipients click the included link.

Phishing 302

Phishing Architecture Passwords Accountability 302

Malwarebytes

MARCH 14, 2025

Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device cant be phished. Enable two-factor authentication (2FA).

Passwords 88

Passwords Data breaches Phishing Password Management 88

Malwarebytes

APRIL 15, 2025

Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device cant be phished. Enable two-factor authentication (2FA).

Data breaches 84

Data breaches Ransomware Passwords B2B 84

Daniel Miessler

MAY 14, 2020

Use unique, strong passwords, and store them in a password manager. Many people get hacked from having guessable or previously compromised passwords. Good passwords are long, random, and unique to each account, which means it’s impossible for a human to manage them on their own.

Risk 345

Risk Passwords Password Management Accountability 345

Krebs on Security

AUGUST 5, 2019

The first involves spear phishing attacks to gain access to that second authentication factor, which can be made much more convincing once the attackers have access to specific details about the customer’s account — such as recent transactions or account numbers (even partial account numbers). .

Banking 276

Banking Passwords Risk Accountability 276

SecureWorld News

FEBRUARY 20, 2025

Strengthening identity security Enforce phishing-resistant MFA for all privileged accounts. Use Privileged Access Management (PAM) solutions. Require 16+ character unique passwords stored in an enterprise password manager. Regularly audit and remove unused credentials and accounts.

Ransomware 113

Ransomware IoT Encryption Social Engineering 113

SecureWorld News

APRIL 13, 2025

These platforms can automatically recognize and classify threatening behavior such as suspicious network activity, phishing attacks, and transmission of malware. Here's an example that shows how Google performs phishing detection. Variations in these behavioral patterns can be identified as possible dangers.

Cybersecurity 97

Cybersecurity Artificial Intelligence Threat Detection Cyber threats 97

Malwarebytes

MARCH 19, 2025

Choose a strong password that you dont use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device cant be phished. Enable two-factor authentication (2FA).

Banking 94

Banking Data breaches Computers and Electronics Passwords 94

Bleeping Computer

FEBRUARY 22, 2024

The Bitwarden open-source password management service has introduced a new inline auto-fill menu that addresses the risk of user credentials being stolen through malicious form fields. [.]

Password Management 114

Password Management Phishing Passwords Risk 114

Malwarebytes

JUNE 19, 2023

A particularly nasty slice of phishing, scamming, and social engineering is responsible for DoorDash drivers losing a group total of around $950k. How to avoid phishing Block known bad websites. Malwarebytes DNS filtering blocks malicious websites used for phishing attacks, as well as websites used to spread or control malware.

Scams 98

Scams Phishing Password Management Passwords 98

Malwarebytes

NOVEMBER 2, 2023

At Malwarebytes we’ve been telling people for years not to reuse passwords, and that a password manager is a secure way of remembering all the passwords you need for your online accounts. But we also know that a password manager can be overwhelming, especially when you’re just getting started.

Passwords 143

Passwords Password Management Data breaches Authentication 143

Webroot

FEBRUARY 21, 2025

Phishing scams, ransomware attacks, data breaches, and identity theft are part of a growing list of online dangers that are a daily reality. Password Manager Ensures your passwords are strong and secure, while also making them easy to access and manage. Anti-phishing protection Shields you from phishing attempts.

Antivirus 74

Antivirus Identity Theft Cyber threats Phishing 74