phishing - Security Ticks

Securing your crypto funds: Exchanges add support for hardware 2FA

Binance, Bitcoin Wallet, Coinbase, Cryptocurrencies, cybersecurity, Gemini, hackers, Hacks, Hardware Wallet, phishing, scams, security, Technology, Wallet / SecurityTicks

Securing your crypto funds: Exchanges add support for hardware 2FA 2024-04-05 at 17:02 By Cointelegraph by Rachel Wolfson As phishing attacks rise, crypto exchanges tell users to keep their funds safe by using YubiKey devices and Passkeys, along with hardware wallets. This article is an excerpt from Cointelegraph.com News View Original Source React to this […]

React to this headline:

Securing your crypto funds: Exchanges add support for hardware 2FA Read More »

Cybercriminal adoption of browser fingerprinting

bot, browser, cybercriminals, cybersecurity, Don't miss, Expert analysis, Expert corner, Fortra, Hot stuff, News, opinion, phishing, PhishLabs / SecurityTicks

Cybercriminal adoption of browser fingerprinting 2024-04-05 at 08:01 By Help Net Security Browser fingerprinting is one of many tactics phishing site authors use to evade security checks and lengthen the lifespan of malicious campaigns. While browser fingerprinting has been used by legitimate organizations to uniquely identify web browsers for nearly 15 years, it is now

React to this headline:

Cybercriminal adoption of browser fingerprinting Read More »

Cyberespionage Campaign Targets Government, Energy Entities in India

APT, Cyberwarfare, India, Malware & Threats, Nation-State, phishing, spear-phishing / SecurityTicks

Cyberespionage Campaign Targets Government, Energy Entities in India 2024-03-28 at 17:17 By Ionut Arghire Threat intelligence firm EclecticIQ documents the delivery of malware phishing lures to government and private energy organizations in India. The post Cyberespionage Campaign Targets Government, Energy Entities in India appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Cyberespionage Campaign Targets Government, Energy Entities in India Read More »

Attackers leverage weaponized iMessages, new phishing-as-a-service platform

Android, Don't miss, Hot stuff, iOS, macOS, Netcraft, News, phishing / SecurityTicks

Attackers leverage weaponized iMessages, new phishing-as-a-service platform 2024-03-27 at 12:31 By Zeljka Zorz Scammers are leveraging the Darcula phishing-as-a-service platform, iMessages and Google Messages to great effect. The platform allows them to impersonate a variety of brands based in over 100 different countries: postal services, public and private utilities, packet delivery services, financial institutions, government

React to this headline:

Attackers leverage weaponized iMessages, new phishing-as-a-service platform Read More »

Scammers steal millions from FTX, BlockFi claimants

Cryptocurrency, Cryptocurrency Exchange, Don't miss, Hot stuff, News, phishing, scams / SecurityTicks

Scammers steal millions from FTX, BlockFi claimants 2024-03-25 at 14:56 By Zeljka Zorz Customers of bankrupt crypto platform BlockFi have been targeted with a very convincing phishing email impersonating the platform, asking them to connect their wallet to complete the withdrawal of remaining funds. Judging by this Reddit thread, many have fallen for the scam

React to this headline:

Scammers steal millions from FTX, BlockFi claimants Read More »

APT29 hit German political parties with bogus invites and malware

Don't miss, Germany, Hot stuff, Malware, Mandiant, News, phishing, Russian Federation, Zscaler / SecurityTicks

APT29 hit German political parties with bogus invites and malware 2024-03-25 at 11:46 By Zeljka Zorz APT29 (aka Cozy Bear, aka Midnight Blizzard) has been spotted targeting German political parties for the first time, Mandiant researchers have shared. Phishing leading to malware The attack started in late February 2024, with phishing emails containing bogus invitations

React to this headline:

APT29 hit German political parties with bogus invites and malware Read More »

US organizations targeted with emails delivering NetSupport RAT

Don't miss, Hot stuff, Malware, News, Perception Point, phishing, Remote Access Trojan, social engineering / SecurityTicks

US organizations targeted with emails delivering NetSupport RAT 2024-03-22 at 15:08 By Helga Labus Employees at US-based organizations are being targeted with emails delivering NetSupport RAT malware via “nuanced” exploitation and by using an advanced detection evasion method. The malware campaign The campaign, dubbed PhantomBlu, takes the form of email messages purportedly coming from a

React to this headline:

US organizations targeted with emails delivering NetSupport RAT Read More »

Trezor says phishing, not SIM swap, compromised X account

Cryptocurrencies, hackers, Hacks, phishing, security, Trezor / SecurityTicks

Trezor says phishing, not SIM swap, compromised X account 2024-03-22 at 13:02 By Cointelegraph by Amaka Nwaokocha SatoshiLabs revealed that it suspects the compromise to be a sophisticated and premeditated phishing attack planned by hackers over several weeks. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Trezor says phishing, not SIM swap, compromised X account Read More »

Attackers are targeting financial departments with SmokeLoader malware

Don't miss, finance, Government, Hot stuff, Malware, News, Palo Alto Networks, phishing, spear-phishing, Ukraine / SecurityTicks

Attackers are targeting financial departments with SmokeLoader malware 2024-03-22 at 08:31 By Helga Labus Financially motivated hackers have been leveraging SmokeLoader malware in a series of phishing campaigns predominantly targeting Ukrainian government and administration organizations. The phishing campaign The Ukrainian SSSCIP State Cyber Protection Center (SCPC), together with the Palo Alto Networks Unit 42 research

React to this headline:

Attackers are targeting financial departments with SmokeLoader malware Read More »

Hacker moves $10M from 2023 phishing incident to Tornado Cash

hacker, phishing, Tornado Cash / SecurityTicks

Hacker moves $10M from 2023 phishing incident to Tornado Cash 2024-03-21 at 16:01 By Cointelegraph by Ezra Reguerra The funds were taken from a crypto whale in 2023 when the holder signed transactions that allowed the attacker to access the funds. This article is an excerpt from Cointelegraph.com News View Original Source React to this

React to this headline:

Hacker moves $10M from 2023 phishing incident to Tornado Cash Read More »

Layerswap overrides website hack that drained $100K

hackers, Hacks, Layer2, phishing / SecurityTicks

Layerswap overrides website hack that drained $100K 2024-03-21 at 09:01 By Cointelegraph by Arijit Sarkar According to Layerswap, domain registrar GoDaddy’s sluggish intervention allowed the hacker to retain longer control of the domain. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Layerswap overrides website hack that drained $100K Read More »

Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection

Chrome, phishing, Safe Browsing / SecurityTicks

Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection 2024-03-14 at 19:35 By Ionut Arghire Chrome’s standard Safe Browsing protections now provide real-time malicious site detection and Password Checkup on iOS now flags weak passwords. The post Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection Read More »

Image-based phishing tactics evolve

cybercrime, cybersecurity, email security, Ironscales, News, Osterman Research, phishing, QR codes, report, survey / SecurityTicks

Image-based phishing tactics evolve 2024-03-12 at 06:00 By Help Net Security While 70% of organizations feel their current security stacks are effective against image-based and QR code phishing attacks, 76% were still compromised in the last 12 months, according to IRONSCALES and Osterman Research. IT pros are highly aware of emerging types of phishing attacks

React to this headline:

Image-based phishing tactics evolve Read More »

10 free cybersecurity guides you might have missed

CISA, CISO, critical infrastructure, cyber resilience, Department of Defense, Don't miss, Government, guide, Hot stuff, how-to, News, phishing, Ransomware, skill development, SMBs, strategy, tips, USA / SecurityTicks

10 free cybersecurity guides you might have missed 2024-03-11 at 09:07 By Help Net Security This collection of free cybersecurity guides covers a broad range of topics, from resources for developing cybersecurity programs to specific guides for various sectors and organizations. Whether you work for a small business, a large corporation, or a specific industry,

React to this headline:

10 free cybersecurity guides you might have missed Read More »

Crypto phishers stole $47M last month, impersonators on X to blame

crypto crime, Hacks, phishing, scams, social media, Twitter, X / SecurityTicks

Crypto phishers stole $47M last month, impersonators on X to blame 2024-03-11 at 06:32 By Cointelegraph by Martin Young Most victims were lured to phishing websites from comments posted by impersonator accounts on X. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Crypto phishers stole $47M last month, impersonators on X to blame Read More »

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks

BEC, cybercrime, email security, phishing / SecurityTicks

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks 2024-03-07 at 16:40 By Ionut Arghire Threat actor tracked as TA4903 spoofing US government entities in phishing and fraud campaigns. The post Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks Read More »

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes

authentication, Don't miss, Hot stuff, initial access broker, News, phishing, Proofpoint, Varonis, Windows / SecurityTicks

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes 2024-03-05 at 12:47 By Zeljka Zorz A threat actor specializing in establishing initial access to target organizations’ computer systems and networks is using booby-trapped email attachments to steal employees’ NTLM hashes. Why are they after NTLM hashes? NT LAN Manager (NTLM) hashes contain

React to this headline:

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes Read More »

Phishers target FCC, crypto holders via fake Okta SSO pages

Cryptocurrency, Don't miss, fcc, Hot stuff, Lookout, News, Okta, phishing, SSO / SecurityTicks

Phishers target FCC, crypto holders via fake Okta SSO pages 2024-03-04 at 14:46 By Helga Labus A new phishing campaign is using fake Okta single sign-on (SSO) pages for the Federal Communications Commission (FCC) and for various cryptocurrency platforms to target users and employees, Lookout researchers have discovered. The phishing campaign By pretending to be

React to this headline:

Phishers target FCC, crypto holders via fake Okta SSO pages Read More »

FCC Employees Targeted in Sophisticated Phishing Attacks

phishing / SecurityTicks

FCC Employees Targeted in Sophisticated Phishing Attacks 2024-03-04 at 14:18 By Ionut Arghire Advanced phishing kit employs novel tactics in attack targeting cryptocurrency platforms and FCC employees. The post FCC Employees Targeted in Sophisticated Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

FCC Employees Targeted in Sophisticated Phishing Attacks Read More »

95% believe LLMs making phishing detection more challenging

Artificial Intelligence, generative AI, LastPass, News, phishing, report, social engineering / SecurityTicks

95% believe LLMs making phishing detection more challenging 2024-03-04 at 07:32 By Help Net Security More than 95% of responding IT and security professionals believe social engineering attacks have become more sophisticated in the last year, according to LastPass. Recent AI advancements, particularly generative AI, have empowered cybercriminals to coordinate social engineering assaults with unprecedented

React to this headline:

95% believe LLMs making phishing detection more challenging Read More »