Tag: social engineering
439 articles
ThreatsDay Bulletin: Exclusive Critical Cyber Roundup
Every click can be the opening move in a campaign of trust-based deception. This bulletin shows how fast-moving actors like COLDRIVER are making signatures obsolete and why shifting to behavioral, intent-driven defenses is now essential.
Improve Collaboration: Best Must-Have Steps to Beat Fraud
When fraudsters thrive on delay, real-time intelligence sharing across banks, telcos, tech firms and government is the fastest way to stop them in their tracks. Getting there means practical steps, common standards and a culture that treats shared signals as the public good they are.
Quantum Route Redirect Phishing Kit: Stunningly Dangerous
The Quantum Route Redirect phishing kit quietly hijacks web traffic, rerouting victims to eerily convincing fake sites. Learn how this route redirect phishing attack works and what you can do to stay one step ahead.
NCA Campaign Exclusive: Critical Crypto Scam Warning
Dont miss this NCA-exclusive crypto scam warning — learn the latest tricks scammers use and quick, practical steps to keep your crypto safe.
SmudgedSerpent Exclusive: Dangerous Hackers Target Experts
Meet SmudgedSerpent: during the summer 2025 Iran–Israel flare-up a stealthy cyber cluster used precision social engineering to target academics and policy experts. By exploiting researchers’ networks and unpublished work, these attacks show how adversaries now shape information and influence far faster than old‑school espionage.
Cybercriminals Targeting Payroll Sites Exclusive Warning
Imagine your paycheck landing in a strangers account—criminals are targeting payroll systems with social‑engineering scams that hijack credentials and reroute direct deposits. Simple fixes like multi‑factor authentication, tighter admin privileges, and out‑of‑band approvals can stop them before paychecks disappear.
Teams Flaw: Stunning Reveal of Critical Boss Spoofing
A newly revealed Microsoft Teams vulnerability let attackers convincingly impersonate executives, forge messages and even rewrite chat history—turning everyday collaboration into a pathway for fraud and data theft. Learn how Check Point’s findings expose the danger of boss‑spoofing and what organizations need to patch now.
macOS Must-Have Security Stops Admin Errors Effortlessly
Stop administrative mistakes before they become breaches: a must-have macOS safeguard quietly blocks accidental mic/camera permissions, insecure SMB v1 shares, and other everyday missteps attackers exploit. Keep the convenience you need without handing adversaries an open door.
Social Engineering: Exclusive Tips to Stop Costly Fraud
Think a caller with a supervisor sounds legit? Social engineering preys on our trust — and with leaked data and mass spoofing it can cost you dearly; these exclusive, easy-to-follow tips will help you spot scams and shut them down.
UK Fraud Cases: Exclusive Insight as 17% Surge Alarms
Don’t assume a message from your bank is safe — APP fraud is surging, with UK incidents up 17% in H1 2025 as scammers turn everyday payments into a growing national risk.
Google Nukes 3,000 Malware YouTube Videos in Stunning Sweep
Google just nuked 3,000 malware YouTube videos that used believable tutorials and “cracked” installers to sneak in a credential‑stealing payload—learn the red flags so curiosity doesn’t cost you your accounts.
Blitz Spear Phishing Campaign Exclusive: Severe NGO Threat
What do you do when a helpful-looking email hands attackers your keys? In October’s PhantomCaptcha spear‑phishing campaign, NGOs and local governments supporting Ukraine were hit with short, surgical, time‑sensitive lures and weaponized attachments that harvested credentials and opened the door to loaders and remote access trojans.
Lazarus Group Exclusive: Stunning Threat to EU Defense
Europe’s drone industry is being stalked by North Korea’s Lazarus Group, which used fake recruitment DreamJob lures to slip malware into engineers’ inboxes and siphon designs, test data and R&D secrets. The campaign shows how porous modern research networks are—and how cyber espionage can become a direct, strategic threat to EU defence and supply‑chain security.
MuddyWater Exclusive: Dangerous Global Phishing Campaign
Get an exclusive look at the dangerous global MuddyWater phishing campaign—how it operates, who it targets, and simple, practical steps you can take today to stay protected.
Singapore Officials Impersonated in Exclusive Costly Scam
Singapore officials impersonated in a sophisticated, costly scam—learn how it works and simple steps to protect yourself before you become a target.
Singapore Officials Impersonated in Stunning, Damaging Scam
Think twice before trusting top search results: criminals are buying Google ads to surface near‑perfect clones of Singapore government sites and using AI-generated deepfakes of real officials to trick investors into wiring funds or handing over credentials.
Scattered Spider Duo: Exclusive Shocking $115M Ransom Link
Imagine lights going out at your hospital or your commute being held hostage — and the alleged architects are teenagers. The newly unsealed indictment accuses Scattered Spider of using social engineering and telecom hacks to extract at least $115M in ransoms, turning account takeovers into real‑world chaos.
Smishing Triad Exclusive: 194K Alarming Malicious Domains
A single text can open a global crime machine — Unit 42 ties 194,000+ malicious domains to one sprawling smishing operation, so pause and verify before you click.
North Korean Hackers: Exclusive Dangerous Drone Job Scam
North Korean hackers are posing as recruiters for “exclusive” drone jobs that could put applicants in real danger — here’s how to spot the scam and protect yourself.
North Korean Hackers Exclusive Drone Espionage Threat
Imagine a calendar invite from a colleague that’s actually a spy. North Korean threat actors are exploiting trusted collaboration tools and clever social engineering to steal drone designs and supplier data from European defense contractors.
ThreatsDay Exclusive: Critical Crypto Fine, AI Hijack Alert
ThreatsDay peels back how criminals are weaponizing trust — not by inventing new tech but by exploiting convenience, stale components and lax controls, from a billion‑dollar crypto collapse to AI‑assisted hijacks and targeted smishing. Find out why ordinary systems and trusted channels are the new attack surface, and who should be closing the door.
Scattered Spider Shocking $115M Ransom Scandal
How did a 19‑year‑old become the alleged face of a criminal group accused of extracting $115 million in ransoms? U.S. prosecutors say Thalha Jubair and a co‑conspirator tied to Scattered Spider used social engineering and stolen credentials to hit hospitals, transit and retailers—proof that stronger defenses and international cooperation are now essential.
AI-driven social engineering: Must-Have Risk Fix
ISACA’s new survey sounds a wake-up call: only 1 in 10 cybersecurity pros feel “very prepared” as AI-powered social engineering tops the threat list for 2026, so organizations must sharpen playbooks, training, and verification now before attackers exploit the gap.
copy-paste attacks: Dangerous, Must-Have Fixes
When a site tells you “paste this into your console” it may seem like helpful tech support, but ClickFix attacks are a fast‑growing social‑engineering scam that trick users into running scripts that steal tokens, clipboard data, or install persistent browser malware. Learn why low technical barriers, defenses that can be bypassed by user interaction, and high‑value browser tokens make copy‑paste attacks especially dangerous — and what can be done to stop them.