phishing - Security Ticks

Attackers are targeting financial departments with SmokeLoader malware

Don't miss, finance, Government, Hot stuff, Malware, News, Palo Alto Networks, phishing, spear-phishing, Ukraine / SecurityTicks

Attackers are targeting financial departments with SmokeLoader malware 2024-03-22 at 08:31 By Helga Labus Financially motivated hackers have been leveraging SmokeLoader malware in a series of phishing campaigns predominantly targeting Ukrainian government and administration organizations. The phishing campaign The Ukrainian SSSCIP State Cyber Protection Center (SCPC), together with the Palo Alto Networks Unit 42 research […]

React to this headline:

Attackers are targeting financial departments with SmokeLoader malware Read More »

Hacker moves $10M from 2023 phishing incident to Tornado Cash

hacker, phishing, Tornado Cash / SecurityTicks

Hacker moves $10M from 2023 phishing incident to Tornado Cash 2024-03-21 at 16:01 By Cointelegraph by Ezra Reguerra The funds were taken from a crypto whale in 2023 when the holder signed transactions that allowed the attacker to access the funds. This article is an excerpt from Cointelegraph.com News View Original Source React to this

React to this headline:

Hacker moves $10M from 2023 phishing incident to Tornado Cash Read More »

Layerswap overrides website hack that drained $100K

hackers, Hacks, Layer2, phishing / SecurityTicks

Layerswap overrides website hack that drained $100K 2024-03-21 at 09:01 By Cointelegraph by Arijit Sarkar According to Layerswap, domain registrar GoDaddy’s sluggish intervention allowed the hacker to retain longer control of the domain. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Layerswap overrides website hack that drained $100K Read More »

Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection

Chrome, phishing, Safe Browsing / SecurityTicks

Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection 2024-03-14 at 19:35 By Ionut Arghire Chrome’s standard Safe Browsing protections now provide real-time malicious site detection and Password Checkup on iOS now flags weak passwords. The post Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection Read More »

Image-based phishing tactics evolve

cybercrime, cybersecurity, email security, Ironscales, News, Osterman Research, phishing, QR codes, report, survey / SecurityTicks

Image-based phishing tactics evolve 2024-03-12 at 06:00 By Help Net Security While 70% of organizations feel their current security stacks are effective against image-based and QR code phishing attacks, 76% were still compromised in the last 12 months, according to IRONSCALES and Osterman Research. IT pros are highly aware of emerging types of phishing attacks

React to this headline:

Image-based phishing tactics evolve Read More »

10 free cybersecurity guides you might have missed

CISA, CISO, critical infrastructure, cyber resilience, Department of Defense, Don't miss, Government, guide, Hot stuff, how-to, News, phishing, Ransomware, skill development, SMBs, strategy, tips, USA / SecurityTicks

10 free cybersecurity guides you might have missed 2024-03-11 at 09:07 By Help Net Security This collection of free cybersecurity guides covers a broad range of topics, from resources for developing cybersecurity programs to specific guides for various sectors and organizations. Whether you work for a small business, a large corporation, or a specific industry,

React to this headline:

10 free cybersecurity guides you might have missed Read More »

Crypto phishers stole $47M last month, impersonators on X to blame

crypto crime, Hacks, phishing, scams, social media, Twitter, X / SecurityTicks

Crypto phishers stole $47M last month, impersonators on X to blame 2024-03-11 at 06:32 By Cointelegraph by Martin Young Most victims were lured to phishing websites from comments posted by impersonator accounts on X. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Crypto phishers stole $47M last month, impersonators on X to blame Read More »

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks

BEC, cybercrime, email security, phishing / SecurityTicks

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks 2024-03-07 at 16:40 By Ionut Arghire Threat actor tracked as TA4903 spoofing US government entities in phishing and fraud campaigns. The post Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks Read More »

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes

authentication, Don't miss, Hot stuff, initial access broker, News, phishing, Proofpoint, Varonis, Windows / SecurityTicks

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes 2024-03-05 at 12:47 By Zeljka Zorz A threat actor specializing in establishing initial access to target organizations’ computer systems and networks is using booby-trapped email attachments to steal employees’ NTLM hashes. Why are they after NTLM hashes? NT LAN Manager (NTLM) hashes contain

React to this headline:

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes Read More »

Phishers target FCC, crypto holders via fake Okta SSO pages

Cryptocurrency, Don't miss, fcc, Hot stuff, Lookout, News, Okta, phishing, SSO / SecurityTicks

Phishers target FCC, crypto holders via fake Okta SSO pages 2024-03-04 at 14:46 By Helga Labus A new phishing campaign is using fake Okta single sign-on (SSO) pages for the Federal Communications Commission (FCC) and for various cryptocurrency platforms to target users and employees, Lookout researchers have discovered. The phishing campaign By pretending to be

React to this headline:

Phishers target FCC, crypto holders via fake Okta SSO pages Read More »

FCC Employees Targeted in Sophisticated Phishing Attacks

phishing / SecurityTicks

FCC Employees Targeted in Sophisticated Phishing Attacks 2024-03-04 at 14:18 By Ionut Arghire Advanced phishing kit employs novel tactics in attack targeting cryptocurrency platforms and FCC employees. The post FCC Employees Targeted in Sophisticated Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

FCC Employees Targeted in Sophisticated Phishing Attacks Read More »

95% believe LLMs making phishing detection more challenging

Artificial Intelligence, generative AI, LastPass, News, phishing, report, social engineering / SecurityTicks

95% believe LLMs making phishing detection more challenging 2024-03-04 at 07:32 By Help Net Security More than 95% of responding IT and security professionals believe social engineering attacks have become more sophisticated in the last year, according to LastPass. Recent AI advancements, particularly generative AI, have empowered cybercriminals to coordinate social engineering assaults with unprecedented

React to this headline:

95% believe LLMs making phishing detection more challenging Read More »

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals

BEC, cybercrime, email security, phishing / SecurityTicks

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals 2024-02-29 at 17:46 By Eduard Kovacs European discount retailer Pepco has lost €15.5 million as a result of what it described as a phishing attack. The post Discount Retail Giant Pepco Loses €15 Million to Cybercriminals appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals Read More »

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT

Artificial Intelligence, attacks, ChatGPT, cybercrime, cybersecurity, Enea, News, phishing, report, survey, telecommunications, vishing / SecurityTicks

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT 2024-02-29 at 06:02 By Help Net Security 76% of enterprises lack sufficient voice and messaging fraud protection as AI-powered vishing and smishing skyrocket following the launch of ChatGPT, according to Enea. Enterprises report significant losses from mobile fraud 61% of enterprises still suffer significant losses to mobile

React to this headline:

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT Read More »

European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack

BEC scams, cybercrime, Don't miss, EU, Hot stuff, News, phishing / SecurityTicks

European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack 2024-02-28 at 16:34 By Zeljka Zorz Pepco Group has confirmed that its Hungarian business has been hit by a “sophisticated fraudulent phishing attack.” The European company, which operates shops under the Pepco, Poundland and Dealz brands, said that the company lost approximately €15.5 million

React to this headline:

European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack Read More »

Understanding employees’ motivations behind risky actions

Artificial Intelligence, BEC scams, cybersecurity, News, phishing, Proofpoint, Ransomware, report, risk, security awareness, training / SecurityTicks

Understanding employees’ motivations behind risky actions 2024-02-28 at 07:31 By Help Net Security More 68% of employees knowingly put their organizations at risk, potentially leading to ransomware or malware infections, data breaches, or financial loss, according to Proofpoint. Perception on security responsibility And while the incidence of successful phishing attacks has slightly declined (71% of

React to this headline:

Understanding employees’ motivations behind risky actions Read More »

Pikabot returns with new tricks up its sleeve

Don't miss, Elastic, Hot stuff, Malware, News, phishing, Zscaler / SecurityTicks

Pikabot returns with new tricks up its sleeve 2024-02-26 at 15:32 By Helga Labus After a short hiatus, Pikabot is back, with significant updates to its capabilities and components and a new delivery campaign. About the Pikabot loader Pikabot is a loader – a type of malware whose primary function is to serve as a

React to this headline:

Pikabot returns with new tricks up its sleeve Read More »

Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect

Cryptocurrency, phishing / SecurityTicks

Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect 2024-02-26 at 13:18 By neetha871ad236bd CRIL investigates a recent phishing scheme targeting Healthcare and cryptocurrency users to deploy Connectwise ScreenConnect. The post Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect appeared first on Cyble. This article is an excerpt from Cyble View Original

React to this headline:

Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect Read More »

Secure email gateways struggle to keep pace with sophisticated phishing campaigns

BEC scams, Cofense, credentials, cybercrime, Email, News, phishing, QR codes, report / SecurityTicks

Secure email gateways struggle to keep pace with sophisticated phishing campaigns 2024-02-23 at 07:02 By Help Net Security In 2023, malicious email threats bypassing secure email gateways (SEGs) increased by more than 100%, according to Cofense. In just two years, Cofense identified over 1.5 million malicious emails bypassing their customers’ SEGs, signaling a 37% increase

React to this headline:

Secure email gateways struggle to keep pace with sophisticated phishing campaigns Read More »

Clean links and sophisticated scams mark new era in email attacks

Artificial Intelligence, cybercriminals, Email, Malware, News, phishing, report, social engineering, VIPRE Security / SecurityTicks

Clean links and sophisticated scams mark new era in email attacks 2024-02-20 at 06:05 By Help Net Security Analysis of 7 billion emails shows clean links are duping users, malicious EML attachments increased 10-fold in Q4, and social engineering attacks are at all-time highs, according to VIPRE Security. The rise of the EML file attachments

React to this headline:

Clean links and sophisticated scams mark new era in email attacks Read More »