#phishing
#phishing
[ follow ]
#cybersecurity #malware #npm #supply-chain-attack #social-engineering #email-security #credential-theft
Information security
fromIT Pro
2 days agoForeign states ramp up cyber attacks on EU with AI-driven phishing and DDoS campaigns
EU public administration faces intense state-aligned cyberespionage; phishing drives initial intrusions, hacktivist DDoS dominates incident counts, and vulnerability exploitation remains significant.
Information security
fromSecuritymagazine
4 days agoCybersecurity Awareness Month Is a Reminder: Phishing Prevention Is Year-Round
Generative AI significantly increases phishing effectiveness by lowering skill barriers and creating highly authentic, hard-to-detect malicious messages, worsening global phishing prevalence.
Information security
fromThe Hacker News
1 week agoResearchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam
Phishing campaign impersonating Ukrainian agencies uses SVG-based emails to deliver CountLoader that installs Amatera Stealer and PureMiner (fileless .NET, process hollowing).
fromZDNET
1 week agoEmployees learn nothing from phishing security training, and this is why
The , conducted by UC San Diego Health and Censys researchers, found that phishing-related cybersecurity training programs had no effect on whether or not employees were duped by phishing emails. After analyzing the results of 10 different phishing email campaigns sent to over 19,500 employees at UC San Diego Health over eight months, the researchers found "no significant relationship between whether users had recently completed an annual, mandated cybersecurity training and the likelihood of falling for phishing emails."
Tech industry
fromComputerWeekly.com
2 weeks agoMicrosoft scores win against Office 365 credential thieves | Computer Weekly
Investigators from Microsoft's Digital Crimes Unit (DCU) have disrupted the network behind the dangerous RaccoonO365 infostealer malware that targeted the usernames and credentials of Office 365 users after being granted a court order in the Southern District of New York. The operation saw a total of 338 websites linked to the popular malware seized and its technical infrastructure disrupted, severing RaccoonO365 users' access to their victims.
Information security
Information security
fromBusiness Insider
2 weeks agoFake military IDs, bogus resumes: How North Korean and Chinese hackers use AI tools to infiltrate companies and other targets
North Korean and Chinese hackers use AI tools like ChatGPT and Claude to create fake IDs, résumés, and phishing materials to enable espionage and unauthorized access.
Information security
fromThe Hacker News
3 weeks agoAxios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
Threat actors exploit Axios and Microsoft Direct Send to spoof trusted senders, bypass gateways, and drive highly successful phishing and account takeover campaigns across industries.
Information security
fromThe Hacker News
3 weeks agoFrom MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks
MostereRAT uses EPL-developed staged payloads, mTLS-protected C2, security-tool disabling, and plugin deployment to gain full control and stealthily persist on infected systems.
Information security
fromThe Hacker News
4 weeks agoVirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages
Attackers use obfuscated SVG files with embedded JavaScript to deliver Base64-encoded phishing pages impersonating Colombia's judiciary and trigger hidden ZIP malware downloads.
fromwww.theguardian.com
1 month agoThe good news is, you're owed a tax refund. The bad news? It's a scam
Tax calculations can be, well, taxing, so a message from HMRC saying that there's been a mistake may not ring too many alarm bells. Some bring good news: you have overpaid and are owed a refund, but others claim you owe money. In both cases there's an imminent deadline to act sometimes with the threat of legal action, or penalties if you don't. Scammers are taking advantage of people's fears over bills to steal personal and banking information.
Information security
fromWIRED
1 month agoScammers Will Try to Trick You Into Filling Out Google Forms. Don't Fall for It
These forms can be created in minutes, with clean and clear formatting, official-looking images and video, and-most importantly of all-a genuine Google Docs URL that your web browser will see no problem with. Scammers can then use these authentic-looking forms to ask for payment details or login information. It's a type of scam that continues to spread, with Google itself issuing a warning about the issue in February.
Information security
Information security
fromTechzine Global
1 month agoPhishing campaign targets Teams and Zoom with RMM tool
Attackers hijack ConnectWise ScreenConnect via AI-driven phishing that impersonates Zoom/Teams, using cloud obfuscation to gain administrator access and enable lateral movement and credential theft.
Information security
fromABC7 Los Angeles
1 month agoDon't click on that text claiming to be from Amazon. Here's what to know about the scam
Scammers send fake Amazon texts claiming refunds or recalls to phish for personal information and money; verify via the Amazon app/website and report spam to 7726.
fromThe Hacker News
1 month agoClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections
"Like a real-world virus variant, this new 'ClickFix' strain quickly outpaced and ultimately wiped out the infamous fake browser update scam that plagued the web just last year."
Privacy professionals
fromCSO Online
2 months agoSupply chain attack compromises npm packages to spread backdoor malware
In a newly discovered supply chain attack, attackers last week targeted a range of npm-hosted JavaScript type testing utilities, several of which were successfully compromised to distribute malware.
JavaScript
[ Load more ]