Tag: social engineering
408 articles
macOS Must-Have Security Stops Admin Errors Effortlessly
Stop administrative mistakes before they become breaches: a must-have macOS safeguard quietly blocks accidental mic/camera permissions, insecure SMB v1 shares, and other everyday missteps attackers exploit. Keep the convenience you need without handing adversaries an open door.
Social Engineering: Exclusive Tips to Stop Costly Fraud
Think a caller with a supervisor sounds legit? Social engineering preys on our trust — and with leaked data and mass spoofing it can cost you dearly; these exclusive, easy-to-follow tips will help you spot scams and shut them down.
UK Fraud Cases: Exclusive Insight as 17% Surge Alarms
Don’t assume a message from your bank is safe — APP fraud is surging, with UK incidents up 17% in H1 2025 as scammers turn everyday payments into a growing national risk.
Google Nukes 3,000 Malware YouTube Videos in Stunning Sweep
Google just nuked 3,000 malware YouTube videos that used believable tutorials and “cracked” installers to sneak in a credential‑stealing payload—learn the red flags so curiosity doesn’t cost you your accounts.
Blitz Spear Phishing Campaign Exclusive: Severe NGO Threat
What do you do when a helpful-looking email hands attackers your keys? In October’s PhantomCaptcha spear‑phishing campaign, NGOs and local governments supporting Ukraine were hit with short, surgical, time‑sensitive lures and weaponized attachments that harvested credentials and opened the door to loaders and remote access trojans.
Lazarus Group Exclusive: Stunning Threat to EU Defense
Europe’s drone industry is being stalked by North Korea’s Lazarus Group, which used fake recruitment DreamJob lures to slip malware into engineers’ inboxes and siphon designs, test data and R&D secrets. The campaign shows how porous modern research networks are—and how cyber espionage can become a direct, strategic threat to EU defence and supply‑chain security.
MuddyWater Exclusive: Dangerous Global Phishing Campaign
Get an exclusive look at the dangerous global MuddyWater phishing campaign—how it operates, who it targets, and simple, practical steps you can take today to stay protected.
Singapore Officials Impersonated in Exclusive Costly Scam
Singapore officials impersonated in a sophisticated, costly scam—learn how it works and simple steps to protect yourself before you become a target.
Singapore Officials Impersonated in Stunning, Damaging Scam
Think twice before trusting top search results: criminals are buying Google ads to surface near‑perfect clones of Singapore government sites and using AI-generated deepfakes of real officials to trick investors into wiring funds or handing over credentials.
Scattered Spider Duo: Exclusive Shocking $115M Ransom Link
Imagine lights going out at your hospital or your commute being held hostage — and the alleged architects are teenagers. The newly unsealed indictment accuses Scattered Spider of using social engineering and telecom hacks to extract at least $115M in ransoms, turning account takeovers into real‑world chaos.
Smishing Triad Exclusive: 194K Alarming Malicious Domains
A single text can open a global crime machine — Unit 42 ties 194,000+ malicious domains to one sprawling smishing operation, so pause and verify before you click.
North Korean Hackers: Exclusive Dangerous Drone Job Scam
North Korean hackers are posing as recruiters for “exclusive” drone jobs that could put applicants in real danger — here’s how to spot the scam and protect yourself.
North Korean Hackers Exclusive Drone Espionage Threat
Imagine a calendar invite from a colleague that’s actually a spy. North Korean threat actors are exploiting trusted collaboration tools and clever social engineering to steal drone designs and supplier data from European defense contractors.
ThreatsDay Exclusive: Critical Crypto Fine, AI Hijack Alert
ThreatsDay peels back how criminals are weaponizing trust — not by inventing new tech but by exploiting convenience, stale components and lax controls, from a billion‑dollar crypto collapse to AI‑assisted hijacks and targeted smishing. Find out why ordinary systems and trusted channels are the new attack surface, and who should be closing the door.
Scattered Spider Shocking $115M Ransom Scandal
How did a 19‑year‑old become the alleged face of a criminal group accused of extracting $115 million in ransoms? U.S. prosecutors say Thalha Jubair and a co‑conspirator tied to Scattered Spider used social engineering and stolen credentials to hit hospitals, transit and retailers—proof that stronger defenses and international cooperation are now essential.
AI-driven social engineering: Must-Have Risk Fix
ISACA’s new survey sounds a wake-up call: only 1 in 10 cybersecurity pros feel “very prepared” as AI-powered social engineering tops the threat list for 2026, so organizations must sharpen playbooks, training, and verification now before attackers exploit the gap.
copy-paste attacks: Dangerous, Must-Have Fixes
When a site tells you “paste this into your console” it may seem like helpful tech support, but ClickFix attacks are a fast‑growing social‑engineering scam that trick users into running scripts that steal tokens, clipboard data, or install persistent browser malware. Learn why low technical barriers, defenses that can be bypassed by user interaction, and high‑value browser tokens make copy‑paste attacks especially dangerous — and what can be done to stop them.
SIM card supply network Exposed: Risky, Stunning Takedown
Europol just tore down a sophisticated cross-border SIM card supply network that criminals used to hide identities and run scams — a stark reminder that SMS-based authentication can be easily abused. Protect yourself by using authenticator apps or security keys, monitoring accounts for unusual activity, and urging carriers to adopt stronger ID checks.
Sothebys data breach: Exclusive Devastating Fallout
Sotheby’s recent data breach exposed buyers’ sensitive financial and identity records — and some of those files are already being offered for sale online — forcing clients to scramble for protection and pushing the auction world to rethink security. If you entrusted the house with your details, now’s the time to monitor accounts, consider fraud alerts, and demand stronger safeguards.
Whisper 2FA: Exclusive Risky Phishing Threat
Think 2FA is foolproof? Researchers warn Whisper 2FA — a phishing‑as‑a‑service tool tied to roughly one million credential‑theft attempts since July 2025 — shows attackers can cheaply scale real‑time relay attacks, so phishing‑resistant authentication and layered defenses are now essential.
Capita fined £14m: Shocking Risky Wake-up Call
When the company you trust with your data leaves the front door ajar, millions can pay the price — Capita was fined £14m after a 2023 breach exposed 6.6 million records, a sharp reminder that outsourcing data demands airtight security and clear accountability.
Scattered Lapsus$ Hunters: Exclusive Risky Hiatus
After the FBI seized their site, teenage collective Scattered Lapsus$ Hunters vowed to go dark until 2026 — a defiant restart in a familiar retire-regroup-return cycle. Whether they stick to it or not, defenders should treat the pause as a chance to patch vulnerabilities, rotate credentials and strengthen defenses.
RMM software Must-Have Protections: Best Defenses
Remote monitoring tools like ScreenConnect make IT life easier—but when attackers hijack them through phishing or stolen credentials, that convenience becomes a powerful way to spread ransomware and steal data. Protect your RMM consoles with strong authentication, network segmentation, and vigilant monitoring before a single click turns into a network-wide crisis.
sensitive information Shocking Prospect Breach Reveals Risk
A cyber gaffe at Prospect exposed sensitive details — including sexual orientation and disability status — for up to 160,000 members. Now the union must act fast with clear fixes and transparent support to rebuild trust and protect vulnerable members.