Information security
fromTheregister
1 day agoCrime crew impersonates help desk, abuses Teams chats
A new threat group uses social engineering and custom malware to steal data through Microsoft Teams and phishing tactics.
#tech-support-scams
#tech-support-scams
[ follow ]
#cybersecurity #phishing #social-engineering #malware #ransomware #cybercrime #ai #fraud #credential-theft #data-theft
#cybersecurity
Careers
fromEntrepreneur
1 day agoHow to Know Where Your Security Threat Is Before It's Too Late
Organizations winning the security talent war operationalize key questions to prevent knowledge loss and enhance cybersecurity resilience.
Information security
fromZDNET
4 hours agoNearly half of cybersecurity pros want to quit - here's why
There's a significant mismatch between demand and rewards in cybersecurity, leading to dissatisfaction among professionals.
fromMilitary.com
2 days agoAI MAGA Influencer, Service Member Scams Fuel 'Digital Stolen Valor' Rise
The administrators behind Military Phony described 'digital stolen valor' as the online equivalent of wearing medals you didn't earn, using exaggerated or fabricated credentials to gain respect, sympathy or opportunity that would otherwise belong to someone else.
Social media marketing
#phishing
Privacy technologies
fromTechzine Global
1 month agoFake Google Security page hijacks browser as proxy for attackers
Attackers use fake Google security notifications to install malicious Progressive Web Apps that steal one-time passwords, crypto wallet addresses, location data, and intercept SMS codes through social engineering and legitimate browser APIs.
Privacy technologies
fromTechzine Global
1 month agoFake Google Security page hijacks browser as proxy for attackers
Attackers use fake Google security notifications to install malicious Progressive Web Apps that steal one-time passwords, crypto wallet addresses, location data, and intercept SMS codes through social engineering and legitimate browser APIs.
fromTechCrunch
2 days agoAnother spyware maker caught distributing fake Android snooping apps | TechCrunch
Morpheus, a new malware identified by Osservatorio Nessuno, masquerades as a phone updating app and is capable of stealing a broad range of data from an intended target's device.
Privacy professionals
Information security
fromSecurityWeek
1 day agoChina-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks
GopherWhisper is a newly identified APT using legitimate services for command-and-control communication and data exfiltration, primarily targeting a Mongolian government entity.
fromSilicon Canals
2 months agoI'm a retired Boomer and I just watched my smartest friend lose everything to a scam-here are 9 ways they got to him that could get to anyone - Silicon Canals
Last month, I sat across from one of the brightest people I know as he explained how he'd lost nearly everything to a sophisticated scam. This wasn't some naive teenager or technophobe. This was my friend from university days, a retired executive who'd navigated corporate politics for decades and made shrewd investment decisions his whole life. Watching him piece together how it happened was like watching someone solve a puzzle in reverse.
Psychology
Privacy professionals
fromComputerworld
1 month agoCyber criminals too are working from home... your home
The FBI warns that cybercriminals use residential proxies to mask illegal activities by hijacking IoT devices, smartphones, and routers, threatening both consumers and enterprises, particularly older devices.
Information security
fromSecurityWeek
1 month agoSecurity Firm Executive Targeted in Sophisticated Phishing Attack
A C-level executive at Outpost24 was targeted by a sophisticated phishing attack using the Kratos phishing-as-a-service kit that exploited legitimate services like Cisco and Nylas to bypass security defenses.
fromPCWorld
1 month agoPhishing scammers weaponize ICE ragebait
The email seen by at least some customers of the Emma email platform was a phishing scam. Hackers hoped to inspire instant panic with the words, 'As part of our commitment to supporting U.S. Immigration and Customs Enforcement (ICE), we will be adding a Support ICE donation button to the footer of every email sent through our platform.'
Information security
Information security
fromTheregister
1 month agoMicrosoft OAuth scams abuse redirects for malware delivery
Microsoft warns of ongoing OAuth abuse scams using phishing emails and URL redirects to deliver malware and compromise organizational devices, primarily targeting government and public-sector entities.
fromZDNET
2 months agoHalf of all cyberattacks start in your browser: 10 essential tips for staying safe
Web browsers are among the top targets for today's cybercriminals, playing a role in nearly half of all security incidents, new research reveals. According to Palo Alto Networks' 2026 Global Incident Response report, an analysis of 750 major cyber incidents recorded last year across 50 countries found that, in total, 48% of cybercrime events involved browser activity. Individuals trying to connect to the web, including business employees, are exposed to cyberthreats on a daily basis.
Information security
fromTechzine Global
1 month agoHow phishing service Tycoon 2FA went under
Tycoon 2FA, a Phishing-as-a-Service (PhaaS) platform, enabled thousands of cybercriminals to steal login credentials and session tokens. Even accounts secured with MFA could be compromised via a single email. The service had been active since at least 2023 and quickly grew to become one of the most widely used phishing platforms in the world.
Information security
[ Load more ]