cybercrime - Security Ticks

Man Helped Chinese Nationals Get Jobs Involving Sensitive US Government Projects

China, cybercrime, fake IT workers, plead guilty / SecurityTicks

Man Helped Chinese Nationals Get Jobs Involving Sensitive US Government Projects 2025-04-17 at 19:40 By Ionut Arghire Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme. The post Man Helped Chinese Nationals Get Jobs Involving Sensitive US Government Projects appeared first on SecurityWeek. This […]

React to this headline:

Man Helped Chinese Nationals Get Jobs Involving Sensitive US Government Projects Read More »

Inside PlugValley: How this AI vishing-as-a-service group operates

cybercrime, cybercriminals, Don't miss, Fortra, News, Video, vishing / SecurityTicks

Inside PlugValley: How this AI vishing-as-a-service group operates 2025-04-17 at 07:41 By Help Net Security In this Help Net Security video, Alexis Ober, Threat Intel Analyst at Fortra, discusses the threat actor group PlugValley, which is now offering AI-powered vishing-as-a-service. Rather than requiring technical skills or large budgets, PlugValley’s service lets any cybercriminal launch vishing

React to this headline:

Inside PlugValley: How this AI vishing-as-a-service group operates Read More »

New ‘ResolverRAT’ Targeting Healthcare, Pharmaceutical Organizations

cybercrime, Malware, Malware & Threats, Morphisec, ResolverRat / SecurityTicks

New ‘ResolverRAT’ Targeting Healthcare, Pharmaceutical Organizations 2025-04-14 at 16:49 By Ionut Arghire Organizations in the healthcare and pharmaceutical sectors have been targeted with ResolverRAT, a new malware family with advanced capabilities. The post New ‘ResolverRAT’ Targeting Healthcare, Pharmaceutical Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

New ‘ResolverRAT’ Targeting Healthcare, Pharmaceutical Organizations Read More »

Malicious NPM Packages Target Cryptocurrency, PayPal Users

cybercrime, Supply Chain Security / SecurityTicks

Malicious NPM Packages Target Cryptocurrency, PayPal Users 2025-04-14 at 13:45 By Ionut Arghire Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers. The post Malicious NPM Packages Target Cryptocurrency, PayPal Users appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Malicious NPM Packages Target Cryptocurrency, PayPal Users Read More »

In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions

cybercrime, In Other News / SecurityTicks

In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions 2025-04-11 at 15:17 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Scattered Spider still active despite arrests, hacker known as EncryptHub unmasked, Rydox admins extradited to US. The post In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions

React to this headline:

In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions Read More »

Ransomware groups push negotiations to new levels of uncertainty

At-Bay, cyber insurance, cybercrime, cybersecurity, News, Ransomware, report, survey / SecurityTicks

Ransomware groups push negotiations to new levels of uncertainty 2025-04-11 at 08:18 By Help Net Security Ransomware attacks increased by nearly 20% in 2024, and the severity rose by 13%, according to At-Bay. The blast radius of ransomware continues to grow as businesses impacted by attacks on vendors and partners increased 43%, while the average

React to this headline:

Ransomware groups push negotiations to new levels of uncertainty Read More »

From likes to leaks: How social media presence impacts corporate security

CISO, cybercrime, cybersecurity, Don't miss, Gen, Ivanti, News, social media / SecurityTicks

From likes to leaks: How social media presence impacts corporate security 2025-04-10 at 08:07 By Help Net Security From a psychological standpoint, we all crave attention, and likes and comments fuel that need, encouraging us to share even more on social media. In the corporate world, this risk grows exponentially because it’s not just our

React to this headline:

From likes to leaks: How social media presence impacts corporate security Read More »

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows

agentic AI, artificial inteligence, Artificial Intelligence, cybercrime, email security, phishing / SecurityTicks

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows 2025-04-09 at 20:02 By Kevin Townsend Agentic AI has improved spear phishing effectiveness by 55% since 2023, research shows. The post AI Now Outsmarts Humans in Spear Phishing, Analysis Shows appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows Read More »

Suspected Scattered Spider Hacker Pleads Guilty

cybercrime, guilty, hacker, Noah Urban, plead guilty, Scattered Spider / SecurityTicks

Suspected Scattered Spider Hacker Pleads Guilty 2025-04-07 at 13:19 By Eduard Kovacs A 20-year-old arrested last year and charged alongside others believed to be members of Scattered Spider has pleaded guilty. The post Suspected Scattered Spider Hacker Pleads Guilty appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Suspected Scattered Spider Hacker Pleads Guilty Read More »

Phishers are increasingly impersonating electronic toll collection companies

cybercrime, Don't miss, Facebook, Guardio, Hot stuff, Microsoft, News, phishing, Prodaft, scams, Steam / SecurityTicks

Phishers are increasingly impersonating electronic toll collection companies 2025-04-03 at 14:31 By Zeljka Zorz Steam was the most imitated brands by phishers in the first quarter of 2025, followed by Microsoft and Facebook/Meta, Guardio researchers have revealed. “Historically, the #1 spot has been dominated by the usual suspects – big tech companies like Meta, Microsoft,

React to this headline:

Phishers are increasingly impersonating electronic toll collection companies Read More »

Beware fake AutoCAD, SketchUp sites dropping malware

backdoor, cybercrime, Kaspersky, Malware, News / SecurityTicks

Beware fake AutoCAD, SketchUp sites dropping malware 2025-04-03 at 09:47 By Help Net Security Malware peddlers are saddling users with the TookPS downloader and the Lapmon and TeviRat backdoors via malicious sites that mimic official ones and ostensibly offer legitimate software for download, Kaspersky researchers have warned. Malicious websites (Source: Kaspersky) The list of impersonated

React to this headline:

Beware fake AutoCAD, SketchUp sites dropping malware Read More »

Cybercriminals exfiltrate data in just three days

cybercrime, cybersecurity, News, Ransomware, report, Sophos, survey / SecurityTicks

Cybercriminals exfiltrate data in just three days 2025-04-03 at 08:14 By Industry News In 56% of Sophos managed detection and response (MDR) and incident response (IR) cases, attackers gained initial access to networks by exploiting external remote services, including edge devices such as firewalls and VPNs, and by leveraging valid accounts. Compromised credentials remain the

React to this headline:

Cybercriminals exfiltrate data in just three days Read More »

Open-source malware doubles, data exfiltration attacks dominate

cybercrime, Data exfiltration, Don't miss, Malware, News, open source, report, Sonatype / SecurityTicks

Open-source malware doubles, data exfiltration attacks dominate 2025-04-03 at 07:02 By Help Net Security There’s been a notable shift in the types of threats targeting software developers, with a total of 17,954 open source malware packages identified in Q1 2025, according to Sonatype. Quarterly breakdown (Source: Sonatype) The Q1 figure represents a significant decrease from

React to this headline:

Open-source malware doubles, data exfiltration attacks dominate Read More »

AI Giving Rise of the ‘Zero-Knowledge’ Threat Actor

AI, Artificial Intelligence, cybercrime / SecurityTicks

AI Giving Rise of the ‘Zero-Knowledge’ Threat Actor 2025-04-02 at 17:18 By Etay Maor The rise of zero-knowledge threat actors powered by AI marks a turning point in the business of cybercrime where sophisticated attacks are no longer confined to skilled attackers. The post AI Giving Rise of the ‘Zero-Knowledge’ Threat Actor appeared first on

React to this headline:

AI Giving Rise of the ‘Zero-Knowledge’ Threat Actor Read More »

North Korea’s IT Operatives Are Exploiting Remote Work Globally

cybercrime, Nation-State, North Korea / SecurityTicks

North Korea’s IT Operatives Are Exploiting Remote Work Globally 2025-04-02 at 16:32 By Kevin Townsend The global rise of North Korean IT worker infiltration poses a serious cybersecurity risk—using fake identities, remote access, and extortion to compromise organizations. The post North Korea’s IT Operatives Are Exploiting Remote Work Globally appeared first on SecurityWeek. This article

React to this headline:

North Korea’s IT Operatives Are Exploiting Remote Work Globally Read More »

Check Point Responds to Hacking Claims

Check Point, cybercrime, data breach, Data leak, Featured, hacked, security company hacked / SecurityTicks

Check Point Responds to Hacking Claims 2025-04-01 at 14:04 By Ionut Arghire Check Point has responded to a hacker’s claims of sensitive data theft, confirming an incident but saying that it had limited impact. The post Check Point Responds to Hacking Claims appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Check Point Responds to Hacking Claims Read More »

How to recognize and prevent deepfake scams

Artificial Intelligence, cybercrime, cybersecurity, deepfakes, Don't miss, how-to, News, tips / SecurityTicks

How to recognize and prevent deepfake scams 2025-03-31 at 06:42 By Help Net Security Deepfakes are a type of synthetic media created using AI and machine learning. In simple terms, they produce videos, images, audio, or text that look and sound real, even though the events depicted never actually happened. These altered clips spread across

React to this headline:

How to recognize and prevent deepfake scams Read More »

In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU Hacked

cybercrime, In Other News / SecurityTicks

In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU Hacked 2025-03-28 at 14:07 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Key members of Hellcat ransomware group identified, controversy around CrushFTP flaw CVE, NYU website hacked and defaced. The post In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU

React to this headline:

In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU Hacked Read More »

Healthcare’s alarming cybersecurity reality

Claroty, cybercrime, cybersecurity, healthcare, News, Ransomware, report, survey, threat / SecurityTicks

Healthcare’s alarming cybersecurity reality 2025-03-28 at 07:35 By Help Net Security 89% of healthcare organizations have the top 1% of riskiest Internet of Medical Things (IoMT) devices – which contain known exploitable vulnerabilities (KEVs) linked to active ransomware campaigns as well as an insecure connection to the internet – on their networks, according to Claroty.

React to this headline:

Healthcare’s alarming cybersecurity reality Read More »

Russian Espionage Group Using Ransomware in Attacks

cybercrime, espionage, QWCrypt, Ransomware, RedCurl / SecurityTicks

Russian Espionage Group Using Ransomware in Attacks 2025-03-27 at 18:25 By Ionut Arghire Russian-speaking espionage group RedCurl has been deploying ransomware on victims’ networks in a recent campaign. The post Russian Espionage Group Using Ransomware in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Russian Espionage Group Using Ransomware in Attacks Read More »