Tag: phishing
756 articles

Device Code Phishing Attacks Proliferate as OAuth Abuse Kits Spread
This year, device code phishing attacks have skyrocketed, surging over 37 times as new OAuth abuse kits make it easier for hackers to hijack accounts. The alarming rise puts account security at risk, leaving many users wondering if the accounts they think are safe really belong to them.

CERT-UA Warns of AGEWHEEZE Malware Spread via Impersonation Campaign
Beware of scammers impersonating Ukraine's cyber emergency team, CERT-UA, in a massive phishing campaign that sent nearly one million emails with a malicious payload. The attackers used a clever tactic, disguising their malware, known as AGEWHEEZE, as a legitimate warning from a trusted source.

Horabot Malware Targets Latin America, Europe in Sophisticated Phishing Drive
Beware of the sneaky Horabot malware that's targeting businesses and users in Latin America and Europe with cleverly disguised PDF attachments that deliver a devastating banking trojan. This sophisticated phishing campaign, linked to a notorious Brazilian cybercrime group, could be the ultimate cyber threat to your financial security.

AI Fuels Alarming Rise in Amplified Cyber Threats
The alarming rise of AI-fueled cyber threats is not about new attacks, but about their explosive speed and scale - enabling hackers to mass-produce threats overnight that were once modest exploits. This forces security teams to rethink their defense strategies and keep pace with the rapidly evolving threat landscape.

TikTok Phishing: Alarming AiTM Campaign Targets Business Accounts
Beware of a sneaky new phishing campaign targeting TikTok Business accounts, using clever AiTM tactics to steal login credentials. Don't get caught out - stay vigilant and protect your account from these cunning cyber threats!

Phishing Surges with Alarming New Tactics This Tax Season
Tax season is here, and with it, a surge in phishing attacks that could leave you vulnerable to identity theft and financial loss. Don't wait until it's too late - stay ahead of cybercriminals and protect your sensitive info from their alarming new tactics.

Most Parked Domains Exclusive: Malicious Content Surge
Surprising new data shows most parked domains are now hosting malicious content—discover why parked domains are becoming a growing security risk and what easy steps you can take to stay protected.

Ransomware attacks Exclusive 2025 surge: Devastating rise
Thought ransomware attacks were fading? In 2025 they surged back—publicly disclosed retail incidents spiked 58% in Q2, turning our everyday stores into high-stakes targets for encryption, data theft and extortion.

AI Exclusive: Dangerous Vibe-Code Malware Surge
Playful vibe coding—quick, AI-assisted tinkering—has slid into the criminal underground, letting amateurs spin up adaptive ransomware, cryptominers and hyper-personalized phishing at speed. The result is a weird mix of sloppy charm and real danger as generative tools turn into a malware force‑multiplier.

After Email Hacking, Campus Faces Stunning Costly Breach
The University of Pennsylvania breach began with an Oct. 31 email hack that quickly escalated into a far costlier intrusion, leaving students and staff scrambling and officials grappling with steep financial and operational fallout. Its a stark reminder that a single compromised inbox can cascade into widespread harm for campuses everywhere.

Coupang Breach Exclusive: Critical Response to 34M
The Coupang data breach affecting 34 million customers shows that stolen contact and profile details—even without payment or authentication theft—can fuel highly convincing phishing, impersonation and downstream fraud. Security leaders warn the real damage is erosion of trust, not just downtime.

Russian Phishing Campaign: Exclusive ISO Stealer Threat
Exclusive: a Russian phishing campaign is circulating a stealthy ISO stealer — learn how it works and quick, practical steps to keep your data safe.

Coupang Confirms Stunning, Damaging Leak of 34M Customers
If youve shopped on Coupang, keep an eye on your accounts: the company confirmed a suspected cyber-attack exposed personal data for about 34 million customers, prompting a police probe and warnings about fraud. The breach lays bare how one‑click convenience concentrates risk and is fueling renewed calls for tougher data safeguards.

Black Friday Exclusive: 3 Dangerous Scams to Avoid
Black Friday scams are getting smarter—learn the three dangerous tricks scammers use and the simple steps you can take to protect your wallet and personal info.

FBI Exclusive: Stunning $262M Costly Account Takeovers
Imagine waking to find your bank account emptied by someone who cloned your bank’s site — the FBI says over $262M has been lost to account takeover scams since January 2025. Learn how phishing, credential stuffing and fake reporting pages let criminals turn stolen logins into instant cash — and what you can do to stop them.

CTM360 Exclusive: Alarming WhatsApp Hijack Campaign Exposed
CTM360 exposes HackOnChat, a clever and dangerous campaign that clones WhatsApp Web to trick users into revealing authentication codes and handing over their accounts. With thousands of malicious URLs and coordinated fronts, this WhatsApp account hijacking operation is alarmingly scalable and hard to takedown.

FTSE 100 Exclusive: Alarming 500,000 Stolen Credentials
Half a million stolen credentials tied to FTSE 100 staff have surfaced in criminal data stores — a blunt wake-up call that weak passwords and reused logins are leaving Britain’s biggest firms dangerously exposed. Socura’s findings show how easily attackers can impersonate insiders and turn simple credential theft into costly breaches unless boards treat cyber as a strategic priority.

Qilin Ransomware Exclusive: Damaging Surge Hits Small Firms
Qilin ransomware has evolved into a commercialized threat that turns simple security lapses—phishing, weak credentials or exposed remote access—into crippling double‑extortion attacks on small and mid-sized firms. With affiliates and leak sites amplifying its reach, now’s the time for SMBs to shore up the basics before opportunistic criminals profit.

NCA Campaign Exclusive: Critical Crypto Scam Warning
Dont miss this NCA-exclusive crypto scam warning — learn the latest tricks scammers use and quick, practical steps to keep your crypto safe.

I Paid Twice Phishing: Exclusive Scam Alert for Booking.com
Think you paid the hotel twice? A sophisticated I Paid Twice phishing campaign is hijacking Booking.com, Airbnb and Expedia bookings—using injected scripts and fake payment pages to trick travelers into handing over extra payments.

Most common passwords: Exclusive list of the worst
We all scoff at 123456, yet it still tops the charts because convenience and password reuse beat security. That complacency makes credential-stuffing cheap and effective, letting attackers turn one weak password into dozens of account takeovers.

Cybercrooks Exclusive: Devastating Cargo Heists Exposed
Meet the new face of cargo theft: software-savvy criminals breach freight systems and team up with on-the-ground hijackers to divert high‑value shipments—creating faster, stealthier heists that ripple through supply chains and national security.

China-Linked Hackers Exploit Windows Flaw: Exclusive Threat
What looks like a harmless Windows shortcut can be a Trojan at the gate—China-linked UNC6384 used malicious .lnk files in ZIPs to invoke PowerShell and DLL sideloading, quietly breaching diplomatic and government targets across Europe in Sept–Oct 2025.

Social Engineering: Exclusive Tips to Stop Costly Fraud
Think a caller with a supervisor sounds legit? Social engineering preys on our trust — and with leaked data and mass spoofing it can cost you dearly; these exclusive, easy-to-follow tips will help you spot scams and shut them down.