IT Governance
SEPTEMBER 15, 2023
Welcome to our September 2023 catches of the month feature, which examines recent phishing scams and the tactics criminals use to trick people into compromising their data. Storm-0324’s phishing lures “typically reference invoices and payments, mimicking services such as DocuSign, Quickbooks, and others”.
Krebs on Security
NOVEMBER 21, 2020
In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com. 2019 that wasn’t discovered until April 2020. ” In the early morning hours of Nov.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
eSecurity Planet
JUNE 16, 2022
Cisco Umbrella , analyzing the threat environment for 2022, found that 86% of organizations experienced phishing, 69% experienced unsolicited crypto mining, 50% were affected by ransomware, and 48% experienced some form of information-stealing malware. Phishing attacks continue to dominate cyber threats. Ransomware.
The Last Watchdog
JULY 13, 2023
Bantick “As the MOVEit hack has proved, the bad actors are always looking for new ways to attack with tactics ranging from third party supplier attacks to more sophisticated social engineering and phishing attack techniques.
Security Affairs
APRIL 25, 2019
Experts pointed out that attackers can exploit the vulnerabilities to take complete control over websites and servers and use them for malicious purposed, such as mining cryptocurrency or deliver malware. ” Experts found about 40,000 sites that are using the Social Warfare plugin, most of which are running a vulnerable version.
KnowBe4
JULY 5, 2023
CyberheistNews Vol 13 #27 | July 5th, 2023 [Heads Up] Massive Impersonation Phishing Campaign Imitates Over 100 Brands and Thousands of Domains A year-long phishing campaign has been uncovered that impersonates 100+ popular clothing, footwear, and apparel brands using at least 10 fake domains impersonating each brand. Save My Spot!
Troy Hunt
MAY 7, 2018
Last year, I wrote a long piece on certs and phishing which I'll come back to and talk about more a little later on. Amusingly, this sort of thing hasn't stopped sellers of commercial Comodo certificates berating Let's Encrypt for issuing them to phishing sites , but you don't have to look far to understand why they're upset.).
Expert insights. Personalized for you.
110 
Let's personalize your content