#social-engineering
#social-engineering

6 days ago

Information security

Scattered Spider's Newest Targets: Transportation and Airlines

Information security

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

fromFortune

Privacy professionals

Allianz Life says hackers accessed personal data on the majority of its 1.4 million US customers

Information security

After $380M hack, Clorox sues its "service desk" vendor for simply giving out passwords

Information security

Ex-IDF cyber chief talks Iran, Scattered Spider with The Reg

Scattered Spider and Iranian cyber units share methods, notably social engineering and the use of minor vulnerabilities.

fromIT Pro

A new, silent social engineering attack is being used by hackers - and your security systems might not notice until it's too late

FileFix is a new social engineering technique enabling cybercriminals to execute malicious commands by exploiting user trust and routine actions.

6 days ago

Information security

Scattered Spider's Newest Targets: Transportation and Airlines

Information security

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

fromFortune

Privacy professionals

Allianz Life says hackers accessed personal data on the majority of its 1.4 million US customers

Information security

After $380M hack, Clorox sues its "service desk" vendor for simply giving out passwords

Information security

Ex-IDF cyber chief talks Iran, Scattered Spider with The Reg

fromIT Pro

Privacy professionals

A new, silent social engineering attack is being used by hackers - and your security systems might not notice until it's too late

Privacy professionals

Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Information security

Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms

Growth hacking

New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Data

Marketing tech

Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique

OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection

A new malware campaign named OBSCURE#BAT deploys a rootkit called r77 using social engineering tactics.

2 days ago

Privacy professionals

Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Information security

Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms

New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Data

EDDIESTEALER is a Rust-based information stealer using fake CAPTCHA pages to trick users into executing malware that harvests sensitive information.

Marketing tech

Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique

Latrodectus malware utilizes the ClickFix technique for stealthy and dangerous payload distribution.

OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection

A new malware campaign named OBSCURE#BAT deploys a rootkit called r77 using social engineering tactics.

Privacy professionals

Allianz Life says 'majority' of customers' personal data stolen in cyberattack | TechCrunch

European startups

Insight Partners fears secret financial info cyber-stolen

Privacy professionals

Allianz Life says 'majority' of customers' personal data stolen in cyberattack | TechCrunch

European startups

Insight Partners fears secret financial info cyber-stolen

Privacy technologies

After BlackSuit is taken down, new ransomware group Chaos emerges

Cybercrims now sending extortion demands in snail mail

Ransomware extortionists are mailing ransom demands without hacking into victim's systems.

Privacy technologies

After BlackSuit is taken down, new ransomware group Chaos emerges

Cybercrims now sending extortion demands in snail mail

Ransomware extortionists are mailing ransom demands without hacking into victim's systems.

Information security

New hires are your weakest link when it comes to phishing attacks here's how you can build a strong security culture that doesn't judge victims

Privacy professionals

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

Privacy professionals

82% of all phishing emails utilized AI

Marketing tech

Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails

Microsoft warns about a phishing attack targeting the hospitality sector that uses ClickFix to deliver malware disguised as emails from Booking.com.

fromwww.itpro.com

Information security

New hires are your weakest link when it comes to phishing attacks here's how you can build a strong security culture that doesn't judge victims

Privacy professionals

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

82% of all phishing emails utilized AI

Phishing emails increased by 17.3% from September 2024 to February 2025, predominantly using AI.

Ransomware payloads rose by 22.6% with significant increases in phishing techniques.

Marketing tech

Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails

Microsoft warns about a phishing attack targeting the hospitality sector that uses ClickFix to deliver malware disguised as emails from Booking.com.

Deepfakes. Fake Recruiters. Cloned CFOs - Learn How to Stop AI-Driven Attacks in Real Time

Social engineering attacks have evolved to utilize AI and deepfake tools for sophisticated impersonation tactics.

Apple

New ZuRu Malware Variant Targeting Developers

ZuRu is a trojan malware for macOS that spreads through trojanized legitimate software and relies on social engineering tactics.

fromIT Brew

Malvertising attackers add fake numbers to real sites

Tech-support scams utilize malicious ads to lead victims to false support lines through legitimate domains.

4 weeks ago

Security Leaders Discuss Marco Rubio AI Imposter

AI-generated impersonation attempts pose serious risks to information security and can bypass human caution.

Generative AI tools have reached a level of sophistication that allows for credible impersonations.

#cybercrime

fromBusiness Matters

EU data protection

British teens arrested over 300m Marks & Spencer hacking spree

Growth hacking

Crooks posing as job hunters to malware-infect recruiters

fromWIRED

Growth hacking

How to Win Followers and Scamfluence People

fromBusiness Matters

EU data protection

British teens arrested over 300m Marks & Spencer hacking spree

Growth hacking

Crooks posing as job hunters to malware-infect recruiters

fromWIRED

Growth hacking

How to Win Followers and Scamfluence People

2024 Saw Over 4 Million Mobile Social Engineering Attacks

Mobile devices are increasingly susceptible to social engineering attacks, particularly with rising phishing interactions on iOS.

fromIT Pro

Disinformation security is a major concern for cyber teams - here's what your business can do

Being able to imitate anyone's voice with only a few seconds of audio or create a nefarious video of someone with only a few pictures found online - that's the scary part.

Information security

fromPsychology Today

3 months ago

The Psychology of Crowds

When people gather in large groups, they often act in ways that are different from how they would behave individually.

Psychology

3 months ago

[Free Webinar] Guide to Securing Your Entire Identity Lifecycle Against AI-Powered Threats

Identity systems face vulnerabilities beyond traditional authentication methods, necessitating comprehensive lifecycle protection.

Attackers increasingly use social engineering and advanced technologies, like deepfakes, to compromise identity systems.

3 months ago

Citizen Lab say exiled Uyghur leaders targeted with Windows spyware | TechCrunch

Hackers targeted Uyghur community leaders using Windows spyware, highlighting the issue of digital attacks on marginalized groups.

fromZDNET

Clicked on a phishing link? 7 steps to take immediately to protect your accounts

Phishing scams have evolved, utilizing generative AI to craft sophisticated, personalized attacks that are difficult to recognize, even for experts.

OpenAI just made its first cybersecurity investment | TechCrunch

Generative AI tools enhance the capabilities of cybercriminals while also providing defenses against these attacks through innovative training solutions.

Digital life

Financial services sector is facing data risks from personal apps

Personal app usage poses substantial data security risks in financial services.

Generative AI utilization is widespread, but a majority of organizations block certain apps.

Social engineering tactics, like malware scams, are prevalent in the financial sector.

Information security

fromZDNET

Vishing attacks surged 442% last year - how to protect yourself

Vishing attacks are rapidly increasing, with a 442% rise reported in late 2024, indicating a serious threat to individuals and organizations.

Artificial intelligence

Exclusive: Anagram takes a gamified approach to employee cybersecurity training

Innovative cybersecurity training methods are key to combating human-driven breaches.

Information security

Russia-aligned hackers are targeting Signal users with device-linking QR codes

Signal remains secure but is targeted by Russian agents to exploit its linking feature for manipulation.

Artificial intelligence