article thumbnail

LLMs and Phishing

Schneier on Security

Here’s an experiment being run by undergraduate computer science students everywhere: Ask ChatGPT to generate phishing emails, and test whether these are better at persuading victims to respond or click on the link than the usual spam. There will also be a change in the sophistication of these attacks.

Phishing 332
article thumbnail

LW ROUNDTABLE — How 2024’s cyber threats will transform the security landscape in 2025

The Last Watchdog

Part two of a four-part series The explosion of AI-driven phishing, insider threats, and business logic abuse has forced a shift toward more proactive, AI-enhanced defenses. Legacy IAM systems cant keep up as AI-powered phishing and deepfakes grow more sophisticated. The drivers are intensifying.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Privacy Roundup: Week 3 of Year 2025

Security Boulevard

Inside the Black Box of Predictive Travel Surveillance Wired Covers the use of powerful surveillance technology in predicting who might be a "threat." Phishing and Scams Covers popular phishing schemes affecting end users - smishing, vishing, and any new scam/phish.

article thumbnail

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

The Hacker News

The Iran-affiliated threat actor tracked as MuddyWater (aka Mango Sandstorm or TA450) has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management (RMM) solution called Atera.

Phishing 128
article thumbnail

Happy 15th Anniversary, KrebsOnSecurity!

Krebs on Security

A surveillance photo of Connor Riley Moucka, a.k.a. Look for a story here in early 2025 that will explore the internal operations of these ruthless and ephemeral voice phishing gangs. “Judische” and “Waifu,” dated Oct 21, 2024, 9 days before Moucka’s arrest.

Scams 226
article thumbnail

Zero-day broker Operation Zero offers up to $4 million for Telegram exploits

Security Affairs

Russian intelligence agencies could use these exploits for surveillance and espionage purposes. Strategic Cyber Warfare In geopolitical conflicts, access to Telegram accounts and devices could provide military and intelligence advantages, such as intercepting sensitive communications, and identifying informants.

article thumbnail

ScarCruft surveilling North Korean defectors and human rights activists

SecureList

The victim was infected by PowerShell malware and we discovered evidence that the actor had already stolen data from the victim and had been surveilling this victim for several months. Spear-phishing document. After a Facebook conversation, the potential target received a spear-phishing email from the actor. Modified time.