article thumbnail

LLMs and Phishing

Schneier on Security

Here’s an experiment being run by undergraduate computer science students everywhere: Ask ChatGPT to generate phishing emails, and test whether these are better at persuading victims to respond or click on the link than the usual spam. There will also be a change in the sophistication of these attacks.

Phishing 341
article thumbnail

LW ROUNDTABLE — How 2024’s cyber threats will transform the security landscape in 2025

The Last Watchdog

Part two of a four-part series The explosion of AI-driven phishing, insider threats, and business logic abuse has forced a shift toward more proactive, AI-enhanced defenses. Legacy IAM systems cant keep up as AI-powered phishing and deepfakes grow more sophisticated. The drivers are intensifying.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Privacy Roundup: Week 3 of Year 2025

Security Boulevard

Inside the Black Box of Predictive Travel Surveillance Wired Covers the use of powerful surveillance technology in predicting who might be a "threat." Phishing and Scams Covers popular phishing schemes affecting end users - smishing, vishing, and any new scam/phish.

article thumbnail

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

The Hacker News

The Iran-affiliated threat actor tracked as MuddyWater (aka Mango Sandstorm or TA450) has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management (RMM) solution called Atera.

Phishing 126
article thumbnail

Happy 15th Anniversary, KrebsOnSecurity!

Krebs on Security

A surveillance photo of Connor Riley Moucka, a.k.a. Look for a story here in early 2025 that will explore the internal operations of these ruthless and ephemeral voice phishing gangs. “Judische” and “Waifu,” dated Oct 21, 2024, 9 days before Moucka’s arrest.

Scams 220
article thumbnail

ScarCruft surveilling North Korean defectors and human rights activists

SecureList

The victim was infected by PowerShell malware and we discovered evidence that the actor had already stolen data from the victim and had been surveilling this victim for several months. Spear-phishing document. After a Facebook conversation, the potential target received a spear-phishing email from the actor. Modified time.

article thumbnail

Domestic Kitten has been conducting surveillance targeting over 1,000 individuals

Security Affairs

Iran-linked APT group Domestic Kitten, also tracked as APT-C-50, has been conducting widespread surveillance targeting over 1,000 individuals. Both groups have conducted long-running cyber-attacks and intrusive surveillance campaigns, which target both individuals’ mobile devices and personal computers.” Pierluigi Paganini.