social engineering

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz

cybercrime, Don't miss, Hot stuff, Hudson Rock, Malware, News, social engineering /

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz 2026-09-15 at 13:10 By Sinisa Markovic Attackers compromised the verified official HBO Max Reddit account, u/hbomax, and used its trusted advertising status to launch a ClickFix campaign targeting macOS and Windows devices with information-stealing malware. Screenshot of the fraudulent ad (Source: Alex Cutts) ClickFix has […]

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz Read More »

Attackers call employees’ personal phones to break into Microsoft 365 accounts

Cloud, cybercrime, Microsoft, News, phishing, social engineering /

Attackers call employees’ personal phones to break into Microsoft 365 accounts 2026-09-10 at 16:26 By Sinisa Markovic Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts. Once inside, they pull files and email […]

Attackers call employees’ personal phones to break into Microsoft 365 accounts Read More »

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle

Cryptocurrency, cybercrime, News, social engineering, US DoJ, USA /

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle 2026-09-09 at 15:11 By Sinisa Markovic A 22-year-old man built his fortune by breaking into strangers’ digital wallets, then spent it on nightclub tabs, private jets, and a fleet of cars worth millions. Malone Lam, a Singapore citizen, pleaded guilty this week in a Washington […]

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle Read More »

Attackers spread malware through ScreenConnect file transfers

ConnectWise, Malware, News, remote access, remote management, social engineering, vulnerability /

Attackers spread malware through ScreenConnect file transfers 2026-09-07 at 12:13 By Sinisa Markovic A file transfer flaw in ScreenConnect Remote Access Support and Access sessions affects both Cloud and On-Premise deployments, ConnectWise confirmed. “A CVE identifier and an official fix will be issued within the week,” the company wrote in its September 3 advisory. ScreenConnect […]

Attackers spread malware through ScreenConnect file transfers Read More »

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

cybercrime, Microsoft Teams, News, Palo Alto Networks, phishing, social engineering /

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks 2026-09-01 at 17:07 By Sinisa Markovic A coordinated voice-phishing (vishing) campaign, named Spring Ring, used fake IT support accounts on Microsoft Teams to trick employees into installing malware or granting remote access to their computers, according to Unit 42, Palo Alto Networks’ […]

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks Read More »

Fake OpenAI Codex download tricks macOS users into installing malware

Cato Networks, Google, macOS, Malware, News, OpenAI, social engineering /

Fake OpenAI Codex download tricks macOS users into installing malware 2026-08-25 at 15:40 By Sinisa Markovic A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular […]

Fake OpenAI Codex download tricks macOS users into installing malware Read More »

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack

breach, News, phishing, ReliaQuest, social engineering, SOCRadar /

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack 2026-08-25 at 12:24 By Sinisa Markovic Cybersecurity company ReliaQuest has confirmed that one of its own employees fell for a social engineering attack, handing attackers a password and a brief window into the company’s identity system. The admission came after the extortion group […]

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack Read More »

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited

cybercrime, Data Breaches, phishing, ReliaQuest, ShinyHunters, social engineering /

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited 2026-08-24 at 20:38 By Eduard Kovacs A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. The post ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited Read More »

Banks look for fraud signals in customer behavior

AI, cybersecurity, Europe, financial industry, fraud, News, report, social engineering, ThreatMark, USA /

Banks look for fraud signals in customer behavior 2026-08-19 at 07:30 By Anamarija Pogorelec Banks are dealing with more fraud in which customers authorize payments after being manipulated by criminals. ThreatMark’s Fraud Readiness Benchmark 2026 describes a banking environment where social engineering, reimbursement requirements and growing case volumes are changing fraud operations. Social engineering moves […]

Banks look for fraud signals in customer behavior Read More »

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response

Brand Impersonation, Brand Monitoring, Dark Web Monitoring, Executive Monitoring, fraud, Managed Takedown, phishing, social engineering, Takedown Services /

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response 2026-08-18 at 05:23 By Mihir Bagwe Manual brand impersonation takedowns fail because attackers move faster than ticket-based abuse reports can resolve — phishing pages and fake executive profiles often do their damage within hours of going live, while manual removal can take days. A managed takedown program […]

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response Read More »

New Android malware relays bank cards to fraudsters while victims still hold them

Android, fraud, Group-IB, Malware, News, scams, social engineering /

New Android malware relays bank cards to fraudsters while victims still hold them 2026-08-14 at 14:08 By Sinisa Markovic Group-IB researchers discovered WindRelay, a new Android malware built to capture live payment card data over NFC (Near Field Communication) and relay it to attackers in real time. WindRelay is paired with the SpyNote remote access […]

New Android malware relays bank cards to fraudsters while victims still hold them Read More »

Fake IRS letters direct crypto holders to bogus compliance portal

Coinbase, Cryptocurrency, News, scams, social engineering /

Fake IRS letters direct crypto holders to bogus compliance portal 2026-08-04 at 07:30 By Sinisa Markovic Scammers are sending physical letters to cryptocurrency holders that copy the look of official IRS notices. The letters tell recipients they must enroll in something called a Digital Asset Compliance Portal before a deadline, or risk penalties. “If you […]

Fake IRS letters direct crypto holders to bogus compliance portal Read More »

Scammers weaponize FaceTime to drain bank accounts

apple, cybercrime, News, scams, social engineering /

Scammers weaponize FaceTime to drain bank accounts 2026-07-17 at 13:02 By Sinisa Markovic Apple is warning iPhone and iPad users that scammers are using FaceTime calls to trick them into handing over money and account details. The company says scammers use social engineering, posing as representatives of a trusted company or entity, and contacting people […]

Scammers weaponize FaceTime to drain bank accounts Read More »

Scattered Spider members jailed over Transport for London hack that cost £29 million

cybercrime, EU, law enforcement, National Crime Agency, News, social engineering, UK /

Scattered Spider members jailed over Transport for London hack that cost £29 million 2026-07-16 at 16:48 By Sinisa Markovic Two members of the notorious “Scattered Spider” hacking collective have been sentenced to five years and six months in prison each for a cyberattack on Transport for London (TfL) that disrupted services for thousands of commuters […]

Scattered Spider members jailed over Transport for London hack that cost £29 million Read More »

Most data brokers won’t tell you what happened to your deletion request

CCPA, data collection, Don't miss, News, Privacy, research, social engineering, USA /

Most data brokers won’t tell you what happened to your deletion request 2026-07-10 at 09:30 By Sinisa Markovic Data brokers collect personal details on most adults in the United States and sell them to buyers that include employers, landlords, insurance companies, and government agencies. California gives residents a way to push back. You can ask […]

Most data brokers won’t tell you what happened to your deletion request Read More »

5,811 arrests, $293 million seized over social engineering scams

arrest, cybercrime, Don't miss, Interpol, law enforcement, News, scams, social engineering /

5,811 arrests, $293 million seized over social engineering scams 2026-07-09 at 14:14 By Sinisa Markovic Criminals who pose as police officers, romantic partners, and business suppliers have built fraud operations that reach across continents. A four-month enforcement campaign against these schemes wrapped up, and police in 97 countries and territories took part. Thousands of arrests […]

5,811 arrests, $293 million seized over social engineering scams Read More »

The fake report message that ends with a stolen Reddit account

cybercrime, Don't miss, Malwarebytes, News, Reddit, scams, social engineering /

The fake report message that ends with a stolen Reddit account 2026-07-09 at 08:30 By Anamarija Pogorelec A direct message arrives on Reddit from a stranger, and it invites a reply. That reply is the point. This scheme runs on social engineering, with no malware and no malicious links, and it has spread across Reddit, […]

The fake report message that ends with a stolen Reddit account Read More »

Malware attacks strip Roblox developers of entire games

cybercrime, Kaspersky, Malware, News, online gaming, social engineering /

Malware attacks strip Roblox developers of entire games 2026-06-18 at 15:41 By Sinisa Markovic Hackers who once focused on stealing valuable Roblox items are now taking over entire games. Although Roblox operates the service, users can create and publish their own games on it. Successful games can generate substantial revenue through in-game purchases. Some developers […]

Malware attacks strip Roblox developers of entire games Read More »

Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware

cybercrime, Instagram, News, social engineering, social media, TikTok /

Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware 2026-06-11 at 16:51 By Sinisa Markovic Cybercriminals are using TikTok and Instagram Reels videos to spread Vidar, an infostealer malware, through fake downloads for popular paid software, according to ReversingLabs. The researchers uncovered two campaigns behind the activity, each using a different approach to […]

Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware Read More »

Scroll to Top