phishing - Security Ticks

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes

authentication, Don't miss, Hot stuff, initial access broker, News, phishing, Proofpoint, Varonis, Windows / SecurityTicks

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes 2024-03-05 at 12:47 By Zeljka Zorz A threat actor specializing in establishing initial access to target organizations’ computer systems and networks is using booby-trapped email attachments to steal employees’ NTLM hashes. Why are they after NTLM hashes? NT LAN Manager (NTLM) hashes contain […]

React to this headline:

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes Read More »

Phishers target FCC, crypto holders via fake Okta SSO pages

Cryptocurrency, Don't miss, fcc, Hot stuff, Lookout, News, Okta, phishing, SSO / SecurityTicks

Phishers target FCC, crypto holders via fake Okta SSO pages 2024-03-04 at 14:46 By Helga Labus A new phishing campaign is using fake Okta single sign-on (SSO) pages for the Federal Communications Commission (FCC) and for various cryptocurrency platforms to target users and employees, Lookout researchers have discovered. The phishing campaign By pretending to be

React to this headline:

Phishers target FCC, crypto holders via fake Okta SSO pages Read More »

FCC Employees Targeted in Sophisticated Phishing Attacks

phishing / SecurityTicks

FCC Employees Targeted in Sophisticated Phishing Attacks 2024-03-04 at 14:18 By Ionut Arghire Advanced phishing kit employs novel tactics in attack targeting cryptocurrency platforms and FCC employees. The post FCC Employees Targeted in Sophisticated Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

FCC Employees Targeted in Sophisticated Phishing Attacks Read More »

95% believe LLMs making phishing detection more challenging

Artificial Intelligence, generative AI, LastPass, News, phishing, report, social engineering / SecurityTicks

95% believe LLMs making phishing detection more challenging 2024-03-04 at 07:32 By Help Net Security More than 95% of responding IT and security professionals believe social engineering attacks have become more sophisticated in the last year, according to LastPass. Recent AI advancements, particularly generative AI, have empowered cybercriminals to coordinate social engineering assaults with unprecedented

React to this headline:

95% believe LLMs making phishing detection more challenging Read More »

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals

BEC, cybercrime, email security, phishing / SecurityTicks

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals 2024-02-29 at 17:46 By Eduard Kovacs European discount retailer Pepco has lost €15.5 million as a result of what it described as a phishing attack. The post Discount Retail Giant Pepco Loses €15 Million to Cybercriminals appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals Read More »

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT

Artificial Intelligence, attacks, ChatGPT, cybercrime, cybersecurity, Enea, News, phishing, report, survey, telecommunications, vishing / SecurityTicks

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT 2024-02-29 at 06:02 By Help Net Security 76% of enterprises lack sufficient voice and messaging fraud protection as AI-powered vishing and smishing skyrocket following the launch of ChatGPT, according to Enea. Enterprises report significant losses from mobile fraud 61% of enterprises still suffer significant losses to mobile

React to this headline:

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT Read More »

European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack

BEC scams, cybercrime, Don't miss, EU, Hot stuff, News, phishing / SecurityTicks

European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack 2024-02-28 at 16:34 By Zeljka Zorz Pepco Group has confirmed that its Hungarian business has been hit by a “sophisticated fraudulent phishing attack.” The European company, which operates shops under the Pepco, Poundland and Dealz brands, said that the company lost approximately €15.5 million

React to this headline:

European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack Read More »

Understanding employees’ motivations behind risky actions

Artificial Intelligence, BEC scams, cybersecurity, News, phishing, Proofpoint, Ransomware, report, risk, security awareness, training / SecurityTicks

Understanding employees’ motivations behind risky actions 2024-02-28 at 07:31 By Help Net Security More 68% of employees knowingly put their organizations at risk, potentially leading to ransomware or malware infections, data breaches, or financial loss, according to Proofpoint. Perception on security responsibility And while the incidence of successful phishing attacks has slightly declined (71% of

React to this headline:

Understanding employees’ motivations behind risky actions Read More »

Pikabot returns with new tricks up its sleeve

Don't miss, Elastic, Hot stuff, Malware, News, phishing, Zscaler / SecurityTicks

Pikabot returns with new tricks up its sleeve 2024-02-26 at 15:32 By Helga Labus After a short hiatus, Pikabot is back, with significant updates to its capabilities and components and a new delivery campaign. About the Pikabot loader Pikabot is a loader – a type of malware whose primary function is to serve as a

React to this headline:

Pikabot returns with new tricks up its sleeve Read More »

Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect

Cryptocurrency, phishing / SecurityTicks

Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect 2024-02-26 at 13:18 By neetha871ad236bd CRIL investigates a recent phishing scheme targeting Healthcare and cryptocurrency users to deploy Connectwise ScreenConnect. The post Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect appeared first on Cyble. This article is an excerpt from Cyble View Original

React to this headline:

Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect Read More »

Secure email gateways struggle to keep pace with sophisticated phishing campaigns

BEC scams, Cofense, credentials, cybercrime, Email, News, phishing, QR codes, report / SecurityTicks

Secure email gateways struggle to keep pace with sophisticated phishing campaigns 2024-02-23 at 07:02 By Help Net Security In 2023, malicious email threats bypassing secure email gateways (SEGs) increased by more than 100%, according to Cofense. In just two years, Cofense identified over 1.5 million malicious emails bypassing their customers’ SEGs, signaling a 37% increase

React to this headline:

Secure email gateways struggle to keep pace with sophisticated phishing campaigns Read More »

Clean links and sophisticated scams mark new era in email attacks

Artificial Intelligence, cybercriminals, Email, Malware, News, phishing, report, social engineering, VIPRE Security / SecurityTicks

Clean links and sophisticated scams mark new era in email attacks 2024-02-20 at 06:05 By Help Net Security Analysis of 7 billion emails shows clean links are duping users, malicious EML attachments increased 10-fold in Q4, and social engineering attacks are at all-time highs, according to VIPRE Security. The rise of the EML file attachments

React to this headline:

Clean links and sophisticated scams mark new era in email attacks Read More »

Corporate users getting tricked into downloading AnyDesk

AnyDesk, Don't miss, enterprise, Hot stuff, Malwarebytes, News, phishing, remote management / SecurityTicks

Corporate users getting tricked into downloading AnyDesk 2024-02-14 at 11:16 By Helga Labus Hackers are leveraging the AnyDesk remote desktop application in a phishing campaign targeting employees, Malwarebytes warns. The AnyDesk phishing campaign In a phishing campaign recently discovered by Malwarebytes researchers, attackers targeted potential victims via email or SMS, personalized to match their roles

React to this headline:

Corporate users getting tricked into downloading AnyDesk Read More »

Protecting against AI-enhanced email threats

Artificial Intelligence, Don't miss, email security, Hot stuff, LLMs, News, phishing, strategy, threats / SecurityTicks

Protecting against AI-enhanced email threats 2024-02-13 at 07:31 By Helga Labus Generative AI based on large language models (LLMs) has become a valuable tool for individuals and businesses, but also cybercriminals. Its ability to process large amounts of data and quickly generate results has contributed to its widespread adoption. AI in the hands of cybercriminals

React to this headline:

Protecting against AI-enhanced email threats Read More »

Uncovering Atomic Stealer (AMOS) Strikes and the Rise of Dead Cookies Restoration

infostealer, Malware, phishing / SecurityTicks

Uncovering Atomic Stealer (AMOS) Strikes and the Rise of Dead Cookies Restoration 2024-01-25 at 15:01 By neetha871ad236bd CRIL analyzes an ongoing phishing campaign spreading an updated version of Atomic Stealer targeting Mac users. The post Uncovering Atomic Stealer (AMOS) Strikes and the Rise of Dead Cookies Restoration appeared first on Cyble. The post Uncovering Atomic

React to this headline:

Uncovering Atomic Stealer (AMOS) Strikes and the Rise of Dead Cookies Restoration Read More »

Protected: Uncovering Atomic Stealer (AMOS) Strikes and the Cookie Resurgence Trend

infostealer, Malware, phishing / SecurityTicks

Protected: Uncovering Atomic Stealer (AMOS) Strikes and the Cookie Resurgence Trend 2024-01-25 at 13:16 By neetha871ad236bd There is no excerpt because this is a protected post. The post Protected: Uncovering Atomic Stealer (AMOS) Strikes and the Cookie Resurgence Trend appeared first on Cyble. The post Protected: Uncovering Atomic Stealer (AMOS) Strikes and the Cookie Resurgence

React to this headline:

Protected: Uncovering Atomic Stealer (AMOS) Strikes and the Cookie Resurgence Trend Read More »

Top cybersecurity concerns for the upcoming elections

Arctic Wolf Networks, cybersecurity, deepfakes, Don't miss, Government, hacking, Hot stuff, phishing, Video / SecurityTicks

Top cybersecurity concerns for the upcoming elections 2024-01-23 at 07:01 By Help Net Security In this Help Net Security video, Adam Marrè, CISO at Arctic Wolf, explains how state and local governments must focus on cybersecurity as the 2024 election approaches in the United States. State and local IT and cybersecurity teams usually have few

React to this headline:

Top cybersecurity concerns for the upcoming elections Read More »

Organizations need to switch gears in their approach to email security

cybersecurity, Egress, Email, email security, News, phishing, report, survey / SecurityTicks

Organizations need to switch gears in their approach to email security 2024-01-23 at 06:02 By Help Net Security Email security risks remain high with 94% of organizations experiencing incidents in the past 12 months, according to Egress. Inbound email incidents primarily took the form of malicious URLs, attacks sent from a compromised account, and malware

React to this headline:

Organizations need to switch gears in their approach to email security Read More »

Out with the old and in with the improved: MFA needs a revamp

Acronis, authentication, cybercriminals, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, human error, MFA, News, opinion, phishing, zero trust / SecurityTicks

Out with the old and in with the improved: MFA needs a revamp 2024-01-19 at 08:02 By Help Net Security From AI to ZTA (zero-trust architecture), the technology responsible for protecting your company’s data has evolved immensely. Despite the advances, cybercriminals repeatedly find new and creative ways to gain access to sensitive information. This can

React to this headline:

Out with the old and in with the improved: MFA needs a revamp Read More »

The right strategy for effective cybersecurity awareness

cyber resilience, cybersecurity, Don't miss, education, Hot stuff, News, phishing, security awareness, skill development / SecurityTicks

The right strategy for effective cybersecurity awareness 2024-01-17 at 07:31 By Helga Labus Employees play a significant role in safeguarding organizational assets. With a constantly evolving threat landscape, cybersecurity awareness training is an essential component in creating a good security culture. Why cybersecurity awareness training? 81% of organizations were hit by malware, phishing, and password

React to this headline:

The right strategy for effective cybersecurity awareness Read More »