#social-engineering
#social-engineering

[ follow ]

The Man Who Sold a Fake Country

Con artists exploit timeless human psychology—scarcity, forged credibility, and persuasive storytelling—to sell false opportunities across eras, from 19th-century Poyais to modern online scams.

fromThe Hacker News

1 day ago

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers

Instead of sending unsolicited phishing emails, attackers initiate contact through a company's public 'Contact Us' form, tricking employees into starting the conversation. What follows are weeks of professional, credible exchanges, often sealed with fake NDAs, before delivering a weaponized ZIP file carrying MixShell, a stealthy in-memory malware.

Information security

fromIT Pro

5 days ago

Has password hygiene ever improved?

Passwords are fundamentally insecure and human-dependent, enabling breaches that can topple organizations; static credentials must be eliminated in favor of stronger authentication.

fromTheregister

6 days ago

'Impersonation as a service' next big thing in cybercrime

Demand for English-language social engineering skills has surged, enabling impersonation-as-a-service operations that facilitate Salesforce intrusions and financially motivated attacks.

#phishing

fromLifehacker

6 days ago

Information security

This Creative Phishing Scam Uses Netflix Job Offers to Steal Facebook Credentials

fromIT Pro

1 week ago

Privacy professionals

#social-engineering#social-engineering

The Man Who Sold a Fake Country

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers

Has password hygiene ever improved?

'Impersonation as a service' next big thing in cybercrime

This Creative Phishing Scam Uses Netflix Job Offers to Steal Facebook Credentials

Malicious URLs overtake email attachments as the biggest malware threat

New hires are your weakest link when it comes to phishing attacks here's how you can build a strong security culture that doesn't judge victims

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

This Creative Phishing Scam Uses Netflix Job Offers to Steal Facebook Credentials

Malicious URLs overtake email attachments as the biggest malware threat

New hires are your weakest link when it comes to phishing attacks here's how you can build a strong security culture that doesn't judge victims

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

Security Leaders Respond to Workday Cyber Incident

The Allianz Life data breach just took a huge turn for the worse

Workday: Data Breach, Hack Exposes Personal Information | Entrepreneur

Everything we know about the Workday data breach so far

Allianz Life says 'majority' of customers' personal data stolen in cyberattack | TechCrunch

Insight Partners fears secret financial info cyber-stolen

Security Leaders Respond to Workday Cyber Incident

The Allianz Life data breach just took a huge turn for the worse

Workday: Data Breach, Hack Exposes Personal Information | Entrepreneur

Everything we know about the Workday data breach so far

Allianz Life says 'majority' of customers' personal data stolen in cyberattack | TechCrunch

Insight Partners fears secret financial info cyber-stolen

Workday hit in wave of social engineering attacks | Computer Weekly

Workday confirms CRM breach via social engineering

Workday also appears to have been hit by Salesforce attack

Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Scattered Spider's Newest Targets: Transportation and Airlines

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

Allianz Life says hackers accessed personal data on the majority of its 1.4 million US customers

Workday confirms CRM breach via social engineering

Workday also appears to have been hit by Salesforce attack

Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Scattered Spider's Newest Targets: Transportation and Airlines

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

Allianz Life says hackers accessed personal data on the majority of its 1.4 million US customers

ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections

Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms

New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Data

Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique

Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms

New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Data

Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique

After BlackSuit is taken down, new ransomware group Chaos emerges

Deepfakes. Fake Recruiters. Cloned CFOs - Learn How to Stop AI-Driven Attacks in Real Time

New ZuRu Malware Variant Targeting Developers

Malvertising attackers add fake numbers to real sites

Security Leaders Discuss Marco Rubio AI Imposter

British teens arrested over 300m Marks & Spencer hacking spree

Crooks posing as job hunters to malware-infect recruiters

How to Win Followers and Scamfluence People

British teens arrested over 300m Marks & Spencer hacking spree

Crooks posing as job hunters to malware-infect recruiters

How to Win Followers and Scamfluence People

2024 Saw Over 4 Million Mobile Social Engineering Attacks

Disinformation security is a major concern for cyber teams - here's what your business can do

The Psychology of Crowds

[Free Webinar] Guide to Securing Your Entire Identity Lifecycle Against AI-Powered Threats

Citizen Lab say exiled Uyghur leaders targeted with Windows spyware | TechCrunch

#social-engineering
#social-engineering