phishing - Security Ticks

USDA Implements Phishing-Resistant Multi-Factor Authentication (MFA) with Fast Identity Online (FIDO)

USDA Implements Phishing-Resistant Multi-Factor Authentication (MFA) with Fast Identity Online (FIDO) 2024-11-21 at 13:28 By daksh sharma Overview The U.S. Department of Agriculture (USDA) has announced the use of Fast IDentity Online (FIDO) protocols, a new solution for phishing-resistant authentication. This shift to FIDO-based multi-factor authentication (MFA) has proven successful in securing USDA systems against […]

React to this headline:

USDA Implements Phishing-Resistant Multi-Factor Authentication (MFA) with Fast Identity Online (FIDO) Read More »

GoIssue phishing tool targets GitHub developer credentials

cybercrime, GitHub, News, phishing / SecurityTicks

GoIssue phishing tool targets GitHub developer credentials 2024-11-13 at 15:49 By Mirko Zorz Researchers discovered GoIssue, a new phishing tool targeting GitHub users, designed to extract email addresses from public profiles and launch mass email attacks. Marketed on a cybercrime forum, GoIssue allows attackers to send bulk emails while keeping their identity hidden using proxies.

React to this headline:

GoIssue phishing tool targets GitHub developer credentials Read More »

North Korean hackers employ new tactics to compromise crypto-related businesses

APT, backdoor, Cryptocurrency, Don't miss, financial industry, Hot stuff, macOS, Malware, News, North Korea, phishing, SentinelOne / SecurityTicks

North Korean hackers employ new tactics to compromise crypto-related businesses 2024-11-07 at 13:49 By Zeljka Zorz North Korean hackers are targeting crypto-related businesses with phishing emails and novel macOS-specific malware. The crypto-related phishing campaign Since July 2024, phishing emails seemingly containing helpful information on risks related to the rise of the price of Bitcoin have

React to this headline:

North Korean hackers employ new tactics to compromise crypto-related businesses Read More »

Beware of phishing emails delivering backdoored Linux VMs!

backdoor, Don't miss, Hot stuff, Linux, News, phishing, Securonix, virtualization / SecurityTicks

Beware of phishing emails delivering backdoored Linux VMs! 2024-11-05 at 16:05 By Zeljka Zorz Unknown attackers are trying to trick Windows users into spinning up a custom Linux virtual machine (VM) with a pre-configured backdoor, Securonix researchers have discovered. The campaign The attack began with a phishing email, they believe, but they weren’t able to

React to this headline:

Beware of phishing emails delivering backdoored Linux VMs! Read More »

Phishers reach targets via Eventbrite services

Don't miss, Eventbrite, Hot stuff, News, Perception Point, phishing / SecurityTicks

Phishers reach targets via Eventbrite services 2024-10-29 at 15:17 By Zeljka Zorz Crooks are leveraging the event management and ticketing website Eventbrite to deliver their phishing emails to potential targets. “Since July, these attacks have increased 25% week over week, resulting in a total growth rate of 900%,” Perception Point researchers say. The phishing emails

React to this headline:

Phishers reach targets via Eventbrite services Read More »

Phishing Campaign Targeting Ukraine: UAC-0215 Threatens National Security

phishing / SecurityTicks

Phishing Campaign Targeting Ukraine: UAC-0215 Threatens National Security 2024-10-29 at 14:33 By daksh sharma Overview CERT-UA, the Cyber Emergency Response Team for Ukraine, uncovered a phishing campaign orchestrated by the threat actor UAC-0215. This campaign specifically targeted public institutions, major industries, and military units across Ukraine. The phishing emails were cleverly disguised to promote integration

React to this headline:

Phishing Campaign Targeting Ukraine: UAC-0215 Threatens National Security Read More »

Black Basta operators phish employees via Microsoft Teams

Don't miss, enterprise, Hot stuff, Microsoft Teams, News, phishing, Ransomware, ReliaQuest, SMBs, social engineering / SecurityTicks

Black Basta operators phish employees via Microsoft Teams 2024-10-28 at 18:51 By Zeljka Zorz Black Basta ransomware affiliates are still trying to trick enterprise employees into installing remote access tool by posing as help desk workers, now also via Microsoft Teams. Phishing via MS Teams Earlier this year, Rapid7 warned about Black Basta using the

React to this headline:

Black Basta operators phish employees via Microsoft Teams Read More »

Phishing scams and malicious domains take center stage as the US election approaches

cybercrime, dark web, election security, Fortinet, News, phishing, report, scams, survey, USA / SecurityTicks

Phishing scams and malicious domains take center stage as the US election approaches 2024-10-22 at 07:03 By Help Net Security Phishing scams aimed at voters, malicious domain registrations impersonating candidates, and other threat activity designed to exploit unassuming victims take center stage as the US election approaches, according to Fortinet. “As the 2024 US presidential

React to this headline:

Phishing scams and malicious domains take center stage as the US election approaches Read More »

Israeli orgs targeted with wiper malware via ESET-branded emails

ESET, Hot stuff, Israel, Malware, News, phishing / SecurityTicks

Israeli orgs targeted with wiper malware via ESET-branded emails 2024-10-18 at 13:32 By Zeljka Zorz Attackers have tried to deliver wiper malware to employees at organizations across Israel by impersonating cybersecurity company ESET via email. The phishing email The attack took the form of a phishing email ostensibly sent by the “Eset Advanced Threat Defense

React to this headline:

Israeli orgs targeted with wiper malware via ESET-branded emails Read More »

Cyble Sensors Detect Attacks on SAML, D-Link, Python Framework

cyberattack, D-Link, phishing, SAML, Threat Actors, WordPress / SecurityTicks

Cyble Sensors Detect Attacks on SAML, D-Link, Python Framework 2024-10-14 at 09:52 By dakshsharma16 Key Takeaways Overview The Cyble Vulnerability Intelligence unit identified several new cyberattacks during the week of Oct. 2-8. Among the targets are the Ruby SAML library, several D-Link NAS devices, the aiohttp client-server framework used for asyncio and Python, and a

React to this headline:

Cyble Sensors Detect Attacks on SAML, D-Link, Python Framework Read More »

100+ domains seized to stymie Russian Star Blizzard hackers

APT, Don't miss, Hot stuff, Justice Department, Microsoft, News, phishing / SecurityTicks

100+ domains seized to stymie Russian Star Blizzard hackers 2024-10-04 at 14:18 By Zeljka Zorz Microsoft and the US Justice Department have seized over 100 domains used by Star Blizzard, a Russian nation-state threat actor. “Between January 2023 and August 2024, Microsoft observed Star Blizzard target over 30 civil society organizations – journalists, think tanks,

React to this headline:

100+ domains seized to stymie Russian Star Blizzard hackers Read More »

North Korea Hackers Linked to Breach of German Missile Manufacturer

APT43, Diehl Defence, Kimsuky, Mandiant, Nation-State, North Korea, phishing / SecurityTicks

North Korea Hackers Linked to Breach of German Missile Manufacturer 2024-09-30 at 20:46 By Ryan Naraine The targeting of Diehl Defence is significant because the company specializes in the production of missiles and ammunition. The post North Korea Hackers Linked to Breach of German Missile Manufacturer appeared first on SecurityWeek. This article is an excerpt

React to this headline:

North Korea Hackers Linked to Breach of German Missile Manufacturer Read More »

Cyble Sensor Intelligence: Attacks, Phishing Scams and Brute-Force Detections

Malware, phishing, vulnerability / SecurityTicks

Cyble Sensor Intelligence: Attacks, Phishing Scams and Brute-Force Detections 2024-09-20 at 17:31 By dakshsharma16 Key Takeaways Overview The Cyble Global Sensor Intelligence Network, or CGSI, monitors and captures real-time attack data through Cyble’s network of Honeypot sensors. This week, Cyble’s Threat Hunting service discovered and investigated dozens of exploit attempts, malware intrusions, financial fraud, and brute-force attacks.

React to this headline:

Cyble Sensor Intelligence: Attacks, Phishing Scams and Brute-Force Detections Read More »

Phishing in focus: Disinformation, election and identity fraud

Bolster, cybercrime, cybersecurity, disinformation, Don't miss, election security, Hot stuff, identity theft, News, phishing, scams, Video / SecurityTicks

Phishing in focus: Disinformation, election and identity fraud 2024-09-09 at 06:34 By Help Net Security The frequency of phishing attacks is rising as attackers increasingly utilize AI to execute more scams than ever before. In this Help Net Security video, Abhilash Garimella, Head Of Research at Bolster, discusses how phishing scams are now being hosted

React to this headline:

Phishing in focus: Disinformation, election and identity fraud Read More »

Quishing Campaign Abuses Microsoft Sway to Host Phishing Pages

Microsoft Sway, phishing, quishing / SecurityTicks

Quishing Campaign Abuses Microsoft Sway to Host Phishing Pages 2024-08-29 at 13:01 By Ionut Arghire Threat actors are abusing the Microsoft Sway service to host phishing pages leveraged in QR phishing attacks targeting Office 365 users. The post Quishing Campaign Abuses Microsoft Sway to Host Phishing Pages appeared first on SecurityWeek. This article is an

React to this headline:

Quishing Campaign Abuses Microsoft Sway to Host Phishing Pages Read More »

New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Credentials

iOS, Mobile & Wireless, phishing / SecurityTicks

New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Credentials 2024-08-21 at 20:01 By Ionut Arghire New phishing attacks target iOS and Android users with Progressive Web Applications and WebAPKs to steal banking information. The post New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Credentials appeared first on

React to this headline:

New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Credentials Read More »

New phishing method targets Android and iPhone users

Android, cybercrime, cybersecurity, ESET, Google Play, iOS, iPhone, News, phishing / SecurityTicks

New phishing method targets Android and iPhone users 2024-08-20 at 17:33 By Help Net Security ESET researchers discovered an uncommon type of phishing campaign targeting Android and iPhone users. They analyzed a case observed in the wild that targeted clients of a prominent Czech bank. PWA phishing flow (Source: ESET) This technique is noteworthy because

React to this headline:

New phishing method targets Android and iPhone users Read More »

Cybercriminals exploit file sharing services to advance phishing attacks

Abnormal Security, attacks, BEC scams, cybercrime, cybersecurity, News, phishing, report, survey / SecurityTicks

Cybercriminals exploit file sharing services to advance phishing attacks 2024-08-20 at 06:01 By Help Net Security Threat actors use popular file-hosting or e-signature solutions as a disguise to manipulate their targets into revealing private information or downloading malware, according to Abnormal Security. A file-sharing phishing attack is a unique type of phishing threat in which

React to this headline:

Cybercriminals exploit file sharing services to advance phishing attacks Read More »

Western, Russian Civil Society Targeted in Sophisticated Phishing Attacks

phishing, Russia, spear-phishing / SecurityTicks

Western, Russian Civil Society Targeted in Sophisticated Phishing Attacks 2024-08-16 at 16:16 By Ionut Arghire Multiple Russian, Belarusian, and Western entities perceived as Russia’s enemies have been targeted in two recent spear-phishing campaigns. The post Western, Russian Civil Society Targeted in Sophisticated Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Western, Russian Civil Society Targeted in Sophisticated Phishing Attacks Read More »

World Agricultural Cycling Competition (WACC) Participants Targeted for Havoc C2 Dissemination

Deceptive Site, phishing / SecurityTicks

World Agricultural Cycling Competition (WACC) Participants Targeted for Havoc C2 Dissemination 2024-08-16 at 13:31 By rohansinhacyblecom Key Takeaways Overview CRIL has identified a phishing site hosted at “wacc[.]photo” that is masquerading as the official website for the World Agricultural Cycling Competition. The TA responsible for this phishing site has cloned the legitimate website, making only

React to this headline:

World Agricultural Cycling Competition (WACC) Participants Targeted for Havoc C2 Dissemination Read More »