MacOS malware has a new trick up its sleeve 07/09/2023 at 15:02 By Helga Labus A newer version of the Atomic Stealer macOS malware has a new trick that allows it to bypass the operating system’s Gatekeeper, Malwarebytes researchers have discovered. Mac malware delivered through Google ads The malware, which was first advertised in April […]
MacOS malware has a new trick up its sleeve Read More »
Emerging threat: AI-powered social engineering 06/09/2023 at 07:32 By Help Net Security Social engineering is a sophisticated form of manipulation but, thanks to AI advancements, malicious groups have gained access to highly sophisticated tools, suggesting that we might be facing more elaborate social engineering attacks in the future. It is becoming increasingly evident that the
Emerging threat: AI-powered social engineering Read More »
AI-coded smart contracts may be flawed and ‘fail miserably’ when attacked: CertiK 06/09/2023 at 06:02 By Cointelegraph By Brayden Lindrea CertiK’s security chief Kang Li thinks inexperienced programmers using AI tools such as ChatGPT to write smart contracts is a recipe for disaster. This article is an excerpt from Cointelegraph.com News View Original Source
AI-coded smart contracts may be flawed and ‘fail miserably’ when attacked: CertiK Read More »
From unsuspecting click to data compromise 06/09/2023 at 06:02 By Help Net Security Phishing is a pervasive and ever-evolving cyber threat that has become a primary concern for individuals, organizations, and cybersecurity experts worldwide. This deceptive practice involves cybercriminals using various tactics to trick individuals into divulging sensitive information, such as passwords, financial data, or
From unsuspecting click to data compromise Read More »
MetaMask scammers take over government websites to target crypto investors 05/09/2023 at 13:02 By Cointelegraph By Arijit Sarkar Official government websites from India, Nigeria, Egypt, Colombia, Brazil, Vietnam and other jurisdictions have been found redirecting to fake MetaMask websites. This article is an excerpt from Cointelegraph.com News View Original Source
MetaMask scammers take over government websites to target crypto investors Read More »
Connected cars and cybercrime: A primer 05/09/2023 at 08:02 By Help Net Security Original equipment suppliers (OEMs) and their suppliers who are weighing how to invest their budgets might be inclined to slow pedal investment in addressing cyberthreats. To date, the attacks that they have encountered have remained relatively unsophisticated and not especially harmful. Analysis
Connected cars and cybercrime: A primer Read More »
Spam is up, QR codes emerge as a significant threat vector 04/09/2023 at 07:31 By Help Net Security 85% of phishing emails utilized malicious links in the content of the email, and spam emails increased by 30% from Q1 to Q2 2023, according to a VIPRE report. Information technology organizations also overtook financial institutions (9%)
Spam is up, QR codes emerge as a significant threat vector Read More »
How Ducktail capitalizes on compromised business, ad accounts 01/09/2023 at 12:04 By Helga Labus Quite some money can be made from selling compromised business and ad accounts on social media platforms, and the Ducktail threat actor has specialized in just that. “We observed that an account deemed ‘low-grade’ sells for around 350,000 Vietnamese dong (~$15
How Ducktail capitalizes on compromised business, ad accounts Read More »
Is the cybersecurity community’s obsession with compliance counter-productive? 29/08/2023 at 07:01 By Help Net Security Does anyone think the chances of surviving a plane crash increase if our tray tables are locked and our carry-on bags are completely stowed under our seats? That we’ll be OK if the plane hits a mountain if we have
Is the cybersecurity community’s obsession with compliance counter-productive? Read More »
Kroll SIM-swap attack: FTX, BlockFi and Genesis clients’ info exposed 28/08/2023 at 14:48 By Helga Labus Financial and risk advisory firm Kroll has suffered a SIM-swapping attack that allowed a threat actor to access files containing personal information of clients of bankrupt cryptocurrency platforms FTX, BlockFi and Genesis. The Kroll SIM-swapping attack On Saturday, August
Kroll SIM-swap attack: FTX, BlockFi and Genesis clients’ info exposed Read More »
Open redirect flaws increasingly exploited by phishers 23/08/2023 at 12:49 By Helga Labus Phishing attacks using open redirect flaws are on the rise again, according to Kroll’s Cyber Threat Intelligence (CTI) team, which means organizations should consider refreshing employees’ awareness and knowledge on how to spot them. Malicious URL redirection Open redirect vulnerabilities in web
Open redirect flaws increasingly exploited by phishers Read More »
Cybercriminals turn to AI to bypass modern email security measures 23/08/2023 at 06:31 By Help Net Security Cybercriminals employ artificial intelligence (AI) to create complex email threats like phishing and business email compromise (BEC) attacks, while modern email security systems use AI to counter these attacks, according to Perception Point and Osterman Research. AI’s role
Cybercriminals turn to AI to bypass modern email security measures Read More »
Zimbra users in Europe, Latin America face phishing threat 18/08/2023 at 11:04 By Help Net Security ESET researchers have uncovered a mass-spreading phishing campaign aimed at collecting Zimbra account users’ credentials. Zimbra Collaboration is an open-core collaborative software platform, a popular alternative to enterprise email solutions. About the Zimbra phishing campaign The campaign has been
Zimbra users in Europe, Latin America face phishing threat Read More »
30% of phishing threats involve newly registered domains 18/08/2023 at 05:31 By Help Net Security Phishing remains the most dominant and fastest growing internet crime, largely due to the ubiquity of email and the ceaseless issue of human error that is preyed upon by today’s threat actors, according to Cloudflare. While business email compromise (BEC)
30% of phishing threats involve newly registered domains Read More »
Malicious QR Codes Used in Phishing Attack Targeting US Energy Company 17/08/2023 at 19:02 By Ionut Arghire A widespread phishing campaign utilizing malicious QR codes has hit organizations in various industries, including a major energy company in the US. The post Malicious QR Codes Used in Phishing Attack Targeting US Energy Company appeared first on
Malicious QR Codes Used in Phishing Attack Targeting US Energy Company Read More »
Phishers use QR codes to target companies in various industries 17/08/2023 at 13:01 By Helga Labus A phishing campaign using QR codes has been detected targeting various industries, with the aim to acquire Microsoft credentials. “The most notable target, a major Energy company based in the US, saw about 29% of the over 1000 emails
Phishers use QR codes to target companies in various industries Read More »
Product showcase: Free email security test by ImmuniWeb Community Edition 14/08/2023 at 07:03 By Help Net Security According to an FBI report, in 2022, global losses from business email compromise (BEC) and email account compromise (EAC) attacks attained $43 billion, hitting a historic anti-record. Multiple cybersecurity vendors, including Microsoft and Trend Micro, reported a rapid
Product showcase: Free email security test by ImmuniWeb Community Edition Read More »
Microsoft 365 accounts of execs, managers hijacked through EvilProxy 10/08/2023 at 14:48 By Helga Labus A phishing campaign leveraging the EvilProxy phishing-as-a-service (PhaaS) tool has been spotted targeting Microsoft 365 user accounts of C-level executives and managers at over 100 organizations around the world. The rise of phishing-as-a-service As organizations increasingly employ multi-factor authentication (MFA),
Microsoft 365 accounts of execs, managers hijacked through EvilProxy Read More »
Utilization of Leaked Ransomware Builders in Tech-Related Scams 09/08/2023 at 22:02 By rohansinhacyblecom Key Takeaways This blog sheds light on a new Tech Scam wherein scammers employ deceptive tactics to lure users into paying for non-existent antivirus solutions. Uncovering Tech Scammers possible involvement in different ransomware attacks. The IP address of a domain used in
Utilization of Leaked Ransomware Builders in Tech-Related Scams Read More »
Sophisticated SiMay RAT Spreads Via Telegram Phishing Site 09/08/2023 at 22:02 By rohansinhacyblecom Keylogger and Gh0st RAT Variant deployed to spy on Users Threat actors (TAs) have been relentlessly employing diverse techniques to propagate malware by leveraging counterfeit websites of renowned applications. Cyble Research and Intelligence Labs (CRIL) reported on a trojanized version
Sophisticated SiMay RAT Spreads Via Telegram Phishing Site Read More »