social engineering - Security Ticks

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support

Arctic Wolf Networks, cybercrime, email security, Microsoft Teams, News, social engineering / SecurityTicks

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support 2026-10-27 at 16:16 By Sinisa Markovic Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has found. The security company documented more […]

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support Read More »

Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign

Don't miss, Forescout, Hot stuff, Malware, News, Siemens, social engineering, vulnerability / SecurityTicks

Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign 2026-10-20 at 15:23 By Sinisa Markovic Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing and managing its software. Siemens first published its security advisory on 15 October 2026, giving the […]

Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign Read More »

Europe’s technology backbone is becoming a cyber target

cybersecurity, DDoS, ENISA, EU, Europe, News, phishing, Ransomware, social engineering, supply chain / SecurityTicks

Europe’s technology backbone is becoming a cyber target 2026-09-24 at 07:00 By Anamarija Pogorelec Disruptive attacks on public-facing services, financially motivated cybercrime and compromises of shared technology providers are increasing cybersecurity risks across Europe. ENISA’s Threat Landscape 2026 identifies cybercrime, state-linked activity, foreign information manipulation and interference, hacktivism and vulnerability exploitation as key threats. Geopolitical […]

Europe’s technology backbone is becoming a cyber target Read More »

DarkMe RAT trades zero-days for plain phishing emails

Don't miss, enterprise, Huntress, News, phishing, Remote Access Trojan, social engineering / SecurityTicks

DarkMe RAT trades zero-days for plain phishing emails 2026-09-23 at 16:24 By Zeljka Zorz DarkMe, a remote access trojan and info-stealer that has previously been associated with a threat group that targeted financial market traders and cryptocurrency users, has been spotted again. This time around, its distribution has been simplified: instead of leveraging zero-day exploits, […]

DarkMe RAT trades zero-days for plain phishing emails Read More »

The next intellectual property thief may sound like your CEO

AI, CSC, cybersecurity, malvertising, News, regulation, report, social engineering, social media / SecurityTicks

The next intellectual property thief may sound like your CEO 2026-09-22 at 15:00 By Anamarija Pogorelec Impersonation, phishing and domain-name abuse are the most concerning types of online intellectual property infringement, according to CSC’s The State of Online IP Risk 2026 report. Internet and branded content, online marketplaces and paid search were the channels most […]

The next intellectual property thief may sound like your CEO Read More »

North Korea’s job interview scam runs both ways

account hijacking, Cryptocurrency, cyber espionage, Don't miss, enterprise, government-backed attacks, Hot stuff, News, North Korea, remote working, rust, scams, social engineering, software development, tips / SecurityTicks

North Korea’s job interview scam runs both ways 2026-09-21 at 15:27 By Zeljka Zorz Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive opportunities to compromise their devices and accounts and, ultimately, publish malware. The warning came last week from the Rust Project’s crates.io team […]

North Korea’s job interview scam runs both ways Read More »

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz

cybercrime, Don't miss, Hot stuff, Hudson Rock, Malware, News, social engineering / SecurityTicks

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz 2026-09-15 at 13:10 By Sinisa Markovic Attackers compromised the verified official HBO Max Reddit account, u/hbomax, and used its trusted advertising status to launch a ClickFix campaign targeting macOS and Windows devices with information-stealing malware. Screenshot of the fraudulent ad (Source: Alex Cutts) ClickFix has […]

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz Read More »

Attackers call employees’ personal phones to break into Microsoft 365 accounts

Cloud, cybercrime, Microsoft, News, phishing, social engineering / SecurityTicks

Attackers call employees’ personal phones to break into Microsoft 365 accounts 2026-09-10 at 16:26 By Sinisa Markovic Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts. Once inside, they pull files and email […]

Attackers call employees’ personal phones to break into Microsoft 365 accounts Read More »

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle

Cryptocurrency, cybercrime, News, social engineering, US DoJ, USA / SecurityTicks

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle 2026-09-09 at 15:11 By Sinisa Markovic A 22-year-old man built his fortune by breaking into strangers’ digital wallets, then spent it on nightclub tabs, private jets, and a fleet of cars worth millions. Malone Lam, a Singapore citizen, pleaded guilty this week in a Washington […]

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle Read More »

Attackers spread malware through ScreenConnect file transfers

ConnectWise, Malware, News, remote access, remote management, social engineering, vulnerability / SecurityTicks

Attackers spread malware through ScreenConnect file transfers 2026-09-07 at 12:13 By Sinisa Markovic A file transfer flaw in ScreenConnect Remote Access Support and Access sessions affects both Cloud and On-Premise deployments, ConnectWise confirmed. “A CVE identifier and an official fix will be issued within the week,” the company wrote in its September 3 advisory. ScreenConnect […]

Attackers spread malware through ScreenConnect file transfers Read More »

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

cybercrime, Microsoft Teams, News, Palo Alto Networks, phishing, social engineering / SecurityTicks

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks 2026-09-01 at 17:07 By Sinisa Markovic A coordinated voice-phishing (vishing) campaign, named Spring Ring, used fake IT support accounts on Microsoft Teams to trick employees into installing malware or granting remote access to their computers, according to Unit 42, Palo Alto Networks’ […]

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks Read More »

Fake OpenAI Codex download tricks macOS users into installing malware

Cato Networks, Google, macOS, Malware, News, OpenAI, social engineering / SecurityTicks

Fake OpenAI Codex download tricks macOS users into installing malware 2026-08-25 at 15:40 By Sinisa Markovic A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular […]

Fake OpenAI Codex download tricks macOS users into installing malware Read More »

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack

breach, News, phishing, ReliaQuest, social engineering, SOCRadar / SecurityTicks

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack 2026-08-25 at 12:24 By Sinisa Markovic Cybersecurity company ReliaQuest has confirmed that one of its own employees fell for a social engineering attack, handing attackers a password and a brief window into the company’s identity system. The admission came after the extortion group […]

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack Read More »

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited

cybercrime, Data Breaches, phishing, ReliaQuest, ShinyHunters, social engineering / SecurityTicks

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited 2026-08-24 at 20:38 By Eduard Kovacs A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. The post ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited Read More »

Banks look for fraud signals in customer behavior

AI, cybersecurity, Europe, financial industry, fraud, News, report, social engineering, ThreatMark, USA / SecurityTicks

Banks look for fraud signals in customer behavior 2026-08-19 at 07:30 By Anamarija Pogorelec Banks are dealing with more fraud in which customers authorize payments after being manipulated by criminals. ThreatMark’s Fraud Readiness Benchmark 2026 describes a banking environment where social engineering, reimbursement requirements and growing case volumes are changing fraud operations. Social engineering moves […]

Banks look for fraud signals in customer behavior Read More »

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response

Brand Impersonation, Brand Monitoring, Dark Web Monitoring, Executive Monitoring, fraud, Managed Takedown, phishing, social engineering, Takedown Services / SecurityTicks

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response 2026-08-18 at 05:23 By Mihir Bagwe Manual brand impersonation takedowns fail because attackers move faster than ticket-based abuse reports can resolve — phishing pages and fake executive profiles often do their damage within hours of going live, while manual removal can take days. A managed takedown program […]

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response Read More »

New Android malware relays bank cards to fraudsters while victims still hold them

Android, fraud, Group-IB, Malware, News, scams, social engineering / SecurityTicks

New Android malware relays bank cards to fraudsters while victims still hold them 2026-08-14 at 14:08 By Sinisa Markovic Group-IB researchers discovered WindRelay, a new Android malware built to capture live payment card data over NFC (Near Field Communication) and relay it to attackers in real time. WindRelay is paired with the SpyNote remote access […]

New Android malware relays bank cards to fraudsters while victims still hold them Read More »

Scattered Spider members jailed over Transport for London hack that cost £29 million

cybercrime, EU, law enforcement, National Crime Agency, News, social engineering, UK / SecurityTicks

Scattered Spider members jailed over Transport for London hack that cost £29 million 2026-07-16 at 16:48 By Sinisa Markovic Two members of the notorious “Scattered Spider” hacking collective have been sentenced to five years and six months in prison each for a cyberattack on Transport for London (TfL) that disrupted services for thousands of commuters […]

Scattered Spider members jailed over Transport for London hack that cost £29 million Read More »