Tag: phishing
756 articles
Phishers Target Def Con Attendees with Persistent Campaign
Meet the sneaky phishing scam that hit Def Con attendees, using a clever Google Doc trick that looked legit - but led to a malicious web page instead. A security researcher got roped in by a scammer impersonating a CoinDesk executive, and things quickly escalated.
Hackers Exploit Dropcatch Domains to Redirect Traffic to Scams and Malware
Hackers are exploiting "dropcatch domains" - previously owned domains that are re-registered by new owners - to redirect traffic to scams and malware, taking advantage of the reputation and connections they inherit from their past life. With nearly one in five new domain registrations being a re-registration of an expired name, the threat is more widespread than you might think.
Kimsuky Bolsters Phishing Arsenal with Offline AI Infrastructure
North Korean hackers Kimsuky are taking phishing to the next level by leveraging offline AI infrastructure, a deliberate move to supercharge their espionage capabilities. Genians, a South Korean security firm, uncovered evidence of language-model tools like Ollama and GPT4All being installed and run on Kimsuky's servers.
Phisher Breaches US Defense Supplier's Microsoft 365 Account
A phishing scam led to a breach of a US defense supplier's Microsoft 365 account, exposing sensitive data including customer communications, engineering docs, and potentially export-controlled tech info. The intruder gained access to mailbox contents, but the company found no evidence that the data was copied or exfiltrated.
AI-Powered Phishing Outpaces Blocklist Defenses
Phishing campaigns are now a moving target, with 89% of domains disappearing within two days - and by the time they're blocked, the attackers have already packed up and moved on. AI-powered phishing has outsmarted traditional blocklist defenses, using disposable infrastructure and trusted platforms to stay one step ahead.
Cloud Platforms Expose Phishers to Easy MFA Bypass Tactics
Reputable cloud platforms have unwittingly become a phishing haven, with threat actors exploiting their trusted reputations, generous free tiers, and instant onboarding to launch attacks - all thanks to lenient security measures that rarely require verification. This has made it alarmingly easy for phishers to bypass multi-factor authentication and wreak havoc.
Malware Campaigns Exploit Software Updates for ScreenConnect Installation
Cyber attackers have launched a sneaky malware campaign, dubbed SMOKE#SCREEN, that uses fake software updates and social-engineering tricks to install ConnectWise ScreenConnect on victims' devices. The campaign relies on clever tactics like phishing emails and fake Adobe and Zoom updates to gain access to systems.
WhatsApp Scam Exploits Linked Devices Feature to Hijack Accounts
Beware of a sneaky WhatsApp scam that's hijacking accounts by tricking you into voting for a friend - but actually hands over control to attackers. One wrong click can let scammers take over your account, and you might not even get a password reset alert.
PNLD Breach Reveals U.K. Police and Government Contacts on Dark Web
A recent PNLD data breach has exposed sensitive contact information of U.K. police, government officials, and customers on the dark web, including names, work email addresses, and organisation details. The breach could make it easier for scammers to craft convincing phishing messages targeting law enforcement officers.
SilverFox Exploits New Drivers in BYOVD Attacks on Japanese Manufacturer
Meet the sneaky SilverFox hackers who've been exploiting new drivers to launch BYOVD attacks on a Japanese industrial manufacturer, using clever tactics like DLL sideloading and defense evasion to stay one step ahead. Their attack began with a simple yet effective invoice-themed phishing lure, delivered via popular Chinese services QQ and Tencent Cloud.
Phishing Campaign Operation BlueDash Targets Teams Users with RMM Tools
Beware of Operation BlueDash, a sneaky phishing campaign that tricks Microsoft Teams users into downloading malicious RMM tools by masquerading as a genuine Microsoft Store update. Victims are cleverly directed to a fake store page that claims Teams needs to be updated to access a shared document.
ChatGPT Flaw Exposes Risk of Rogue AI Agents via Phishing Link
One phishing link was all it took to expose a critical flaw in ChatGPT's security, allowing hackers to create rogue AI agents with access to an employee's credentials and unchecked approvals. This vulnerability, known as AgentForger, put organizations at risk of being hijacked by autonomous AI agents controlled by attackers.
Illinois Hacker Sentenced for Exploiting Snapchat Accounts
A 26-year-old Illinois man, Kyle Svara, has been sentenced to 76 months in prison for hacking over 750 Snapchat accounts, using social engineering tactics to phish access codes and trading stolen images online. He'll also face three years of supervised release after serving his time.
Russian Hackers Exploit Zimbra Flaw for Widespread Email Theft
Russian hackers have exploited a Zimbra flaw, CVE-2025-66376, to steal emails from targeted organizations, allowing them to automatically collect a victim's last 90 days of email without requiring any interaction. This alarming vulnerability was weaponized by the Russian state-sponsored group Laundry Bear using a combination of phishing and specially crafted HTML emails.
Identity Theft Exposes Vulnerability in Email Account Security
Giving a scammer a two-factor authentication code can have devastating consequences, as one unfortunate account owner discovered when it allowed the scammer to take over their email address. This simple mistake opened the door to a broader security risk, highlighting a vulnerability in email account security.
Law Enforcement Disrupts Kratos Phishing Kit Targeting Microsoft 365 Sessions
In a major win for cybersecurity, law enforcement agencies have dismantled the notorious Kratos Phishing Kit, pulling over 200 servers offline and disrupting thousands of phishing campaigns targeting Microsoft 365 sessions. The operation, coordinated with Indonesian authorities, is estimated to have impacted around 1,800 paying customers who were using Kratos to run approximately 15,000 phishing campaigns monthly.
World Cup Exposes Cyber Resilience Test for Global Events
The recent World Cup served as a real-world stress test for the cyber resilience of global events, highlighting that the true vulnerability lies in the entire event ecosystem, not just the main attractions. Even without a major breach, the steady stream of spoofed websites and fake ticketing sites shows that cyber threats are always lurking in the background.
AI Emerges as Force Multiplier in Cyberattacks
As AI continues to evolve, it's crucial to treat AI-driven threats as a top priority, as they can significantly accelerate and scale attacks. By leveraging AI, cyber attackers can speed up their operations, but their tactics remain familiar, including credential theft, phishing, and ransomware.
German Authorities Disrupt Kratos Phishing Kit Infrastructure
German authorities have successfully dismantled the infrastructure behind the notorious Kratos phishing kit, a major player in the world of cybercrime. This disruption is a significant win for cybersecurity, thanks to the coordinated efforts of the Central Office for Combating Internet Crime and the Federal Criminal Police.
AI Spam Filters Vulnerable to Text Salting Attacks
Over 1 million retail-themed phishing emails have been detected using a sneaky technique called text salting to evade AI spam filters since April. This clever trick hides harmless words in malicious messages, fooling automated scanners but not the human eye.
Phishers Target LastPass, Bitwarden Users with Fake Security Alerts
Beware of fake security alerts! LastPass and Bitwarden users are being targeted by phishers with convincing emails that mimic real corporate communications, trying to trick you into visiting fraudulent websites.
Misconfigured Server Reveals Evilginx Phishing Operators
A shocking security blunder exposed the inner workings of a massive Evilginx phishing campaign, revealing 218 victims across 12 countries, with nearly 94% being corporate targets, who were quietly harvested over the course of a year. The careless mistake, made on a Budapest virtual private server, gave researchers a rare glimpse into the sophisticated phishing ecosystem.
Dutch Police Expose Suspects in Odido Hacking Case
The Dutch National Police have cracked the Odido hacking case, revealing that suspects impersonated an IT employee in a phone call with customer service, tricking the company into divulging sensitive info through phishing. This clever ruse led to a massive data theft in February.
Cyberattacks Exploit Summer Staffing Gaps
Cyberattacks surge by 40% during holiday periods, with summer being a prime target due to lighter staffing and slower business operations that create the perfect storm for cybercriminals to exploit. When teams are on vacation, attackers see an opportunity to probe for vulnerabilities and test response times.