Data Breach Today

AUGUST 16, 2021

Researchers Found Hackers Deploying Morse Code to Help Evade Detection A yearlong phishing campaign used various techniques to help evade security tools while attempting to harvest the credentials of Office 365 users, according to Microsoft researchers. In some cases, the attackers even used Morse code to help avoid detection.

Phishing 293

Phishing Security 293

Data Breach Today

MARCH 27, 2024

Phishing-as-a-Service Platform Lets Hackers Impersonate More Than 1,100 Domains A phishing-as-a-service platform that allows cybercriminals to impersonate more than 1,100 domains has over the past half year become one of the most widespread adversary-in-the-middle platforms.

Phishing 300

Phishing Authentication 300

Data Breach Today

JUNE 13, 2020

Suspected Russia-Linked Hackers Have Previously Focused on Ukraine The Gamaredon hacking group is now using a new set of malicious tools to compromise Microsoft Outlook as a way of sending spear-phishing emails to victims' contact lists, according to security firm ESET.

Phishing 321

Phishing Security 321

Krebs on Security

NOVEMBER 4, 2021

Here’s a look at a fairly elaborate SMS-based phishing scam that spoofs FedEx in a bid to extract personal and financial information from unwary recipients. One of dozens of FedEx-themed phishing sites currently being advertised via SMS spam. ” Attempting to visit the domain in the phishing link — o001cfedeex[.]com

Phishing 299

Phishing Insurance Passwords Privacy 299

Data Breach Today

MAY 22, 2020

Malicious Messages Attempt to Install NetSupport Manager Tool on Devices Microsoft is warning Windows users about an ongoing "massive" COVID-19-themed phishing campaign that is attempting to install the NetSupport Manager on devices. Attackers can turn NetSupport into a remote access Trojan, or RAT.

Phishing 359

Phishing Access 359

Data Breach Today

NOVEMBER 20, 2020

Approach Helps Hackers Circumvent Security Tools Fraudsters are increasingly using free Google services to create more realistic phishing emails and malicious domains that circumvent security filters, the security firm Armorblox reports.

Phishing 284

Phishing Security 284

Security Affairs

APRIL 18, 2024

carmaker with spear-phishing attacks. In late 2023, BlackBerry researchers spotted the threat actor FIN7 targeting a large US automotive manufacturer with a spear-phishing campaign. BlackBerry reported that the financially motivated group FIN7 targeted the IT department of a large U.S.

Phishing 99

Phishing Manufacturing Libraries IT 99

Security Affairs

APRIL 22, 2024

Russia-linked APT28 group used a previously unknown tool, dubbed GooseEgg, to exploit Windows Print Spooler service flaw. Microsoft reported that the Russia-linked APT28 group (aka “ Forest Blizzard ”, “ Fancybear ” or “ Strontium ” used a previously unknown tool, dubbed GooseEgg, to exploit the Windows Print Spooler flaw CVE-2022-38028.

Military 100

Military File names Education Phishing 100

Data Breach Today

AUGUST 14, 2021

Researchers Found Hackers Deploying Morse Code To Help Evade Detection A year-long phishing campaign used various techniques to help evade security tools while attempting to harvest the credentials of Office 365 users, according to Microsoft researchers. In some cases, the attackers even used Morse code to help avoid detection.

Phishing 218

Phishing Security 218

KnowBe4

SEPTEMBER 12, 2023

Phishing attacks have always been detected through broken English, but now generative artificial intelligence (AI) tools are eliminating all those red flags. OpenAI ChatGPT, for instance, can fix spelling mistakes, odd grammar, and other errors that are common in phishing emails.

Artificial Intelligence 116

Artificial Intelligence Phishing 116

KnowBe4

MARCH 22, 2023

Users need to adapt to an evolving threat landscape in which attackers can use AI tools like ChatGPT to craft extremely convincing phishing emails, according to Matthew Tyson at CSO.

Phishing 107

Phishing Artificial Intelligence 107

Dark Reading

JUNE 30, 2023

The APT35 group (aka Charming Kitten), have added backdoor capabilities to their spear-phishing payloads — and targeted an Israeli reporter with it.

Phishing 98

Phishing IT 98

The Last Watchdog

NOVEMBER 6, 2023

QR code phishing attacks started landing in inboxes around the world about six months ago. Scans slip through These attacks are so successful because many traditional email security tools focus only on text-scanning, allowing image-based attacks to slip through. Use tooling to determine if you hover over the QR code and get a redirect.

Phishing 167

Phishing Education Marketing Cloud 167

KnowBe4

SEPTEMBER 28, 2023

The most basic use of tools like ChatGPT to script out professional-looking emails has all but eliminated improperly written content as an indicator of a potential phishing scam.

Phishing 100

Phishing Security awareness Security 100

Data Breach Today

SEPTEMBER 22, 2021

Researchers Say BulletProofLink Subscription Offers Many Services Microsoft Security on Tuesday issued a detailed report on a massive phishing-as-a-service operation named BulletProofLink that offered as a subscription all the tools needed to conduct a campaign. The gang remains operational.

Phishing 144

Phishing Security 144

KnowBe4

SEPTEMBER 23, 2022

GitHub has issued an alert warning of a phishing campaign targeting users by impersonating the popular DevOps tool CircleCI, BleepingComputer reports. The phishing emails inform users that they’ll need to click on a link and log into their GitHub account in order to review CircleCI’s new terms of service.

Phishing 102

Phishing Authentication Passwords 102

IT Governance

OCTOBER 13, 2023

Given the huge proportion of cyber attacks that rely on phishing to gain a foothold in victims’ systems, it’s hardly surprising that one of the four ways of staying safe online advocated by the US campaign is recognising and reporting phishing. You can find everything you might want to know about phishing on our website.

Phishing 105

Phishing Financial Services Manufacturing Personal data 105

Security Affairs

DECEMBER 29, 2023

Ukraine’s CERT (CERT-UA) warned of a new phishing campaign by the APT28 group to deploy previously undocumented malware strains. CERT-UA discovered multiple phishing attacks aimed at government organizations between December 15 and December 25. MASEPIE is a Python tool used to upload/unload files and execute commands.

Phishing 111

Phishing Computer and Electronics Communications Encryption 111

Security Affairs

MARCH 14, 2023

Microsoft warns of large-scale phishing attacks orchestrated with an open-source adversary-in-the-middle (AiTM) phishing kit available in the cybercrime ecosystem Adversary-in-the-middle (AiTM) phishing kits are becoming an essential technology in the cybercrime ecosystem that is used by multiple threat actors to launch phishing attacks.

Phishing 76

Phishing Authentication Sales Passwords 76

KnowBe4

MAY 18, 2023

This new phishing toolkit is rising in popularity for its effective realism in impersonating not just Microsoft 365, but the victim organization as well.

Phishing 93

Phishing IT 93

IT Governance

SEPTEMBER 15, 2023

Welcome to our September 2023 catches of the month feature, which examines recent phishing scams and the tactics criminals use to trick people into compromising their data. Storm-0324’s phishing lures “typically reference invoices and payments, mimicking services such as DocuSign, Quickbooks, and others”.

Phishing 110

Phishing Mining Education Passwords 110

IT Governance

AUGUST 7, 2023

Welcome to our August 2023 catches of the month feature, in which we explore the latest phishing scams and the tactics that cyber criminals use to trick people into handing over personal data. Check Point credits this rise to an extensive phishing campaign that told victims that there has been suspicious activity on their Microsoft account.

Phishing 98

Phishing Passwords Education Personal data 98

Threatpost

NOVEMBER 18, 2021

Phishing emails are now skating past traditional defenses. Justin Jett, director of audit and compliance at Plixer, discusses what to do about it.

Phishing 101

Phishing Compliance IT Security 101

Data Breach Today

JULY 20, 2023

Developing a Multilayered Defense Strategy for the Most Common Attack Techniques Despite the significant advances technology has made over the past few years, email remains one of the best tools for cybercriminals. Training is just one piece of the puzzle.

Phishing 238

Phishing Security 238

Schneier on Security

JUNE 23, 2023

I get UPS phishing spam on my phone all the time. Turns out that hackers have been harvesting actual UPS delivery data from a Canadian tracking tool for its phishing SMSs. I never click on it, because it’s so obviously spam.

Phishing 79

Phishing IT 79

Data Breach Today

FEBRUARY 15, 2024

Hackers Used LLMs to Perform Tasks That Non-AI Tools Can Perform Nation-state hackers including Russian military intelligence and hackers backed by China have used OpenAI large language models for research and to craft phishing emails, the artificial intelligence company disclosed Tuesday in conjunction with major financial backer Microsoft.

Artificial Intelligence 242

Artificial Intelligence Military Phishing 242

IT Governance

MARCH 7, 2023

Welcome to our March 2023 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. Threat detection is increasingly automated, with tools programmed to spot vulnerabilities and intrusions with little to no human intervention.

Phishing 111

Phishing Artificial Intelligence Passwords Security 111

The Last Watchdog

NOVEMBER 29, 2022

A new development in phishing is the “nag attack.” Nag attacks add to the litany of phishing techniques. Over the years, endless phishing variants have emerged, including: •Bulk phishing. Spear phishing. This limits the effectiveness of automated detection and response tools. Human nature.

Phishing 194

Phishing Authentication Ransomware Marketing 194

The Last Watchdog

MARCH 17, 2022

Cybersecurity tools evolve towards leveraging machine learning (ML) and artificial intelligence (AI) at ever deeper levels, and that’s of course a good thing. Threat actors are now using advanced methods to conduct intricate, personalized phishing and targeted attacks. Related: Business logic hacks plague websites. Humans needed.

Cybersecurity 213

Cybersecurity Artificial Intelligence Personal data Phishing 213

Security Affairs

JULY 26, 2023

FraudGPT is another cybercrime generative artificial intelligence (AI) tool that is advertised in the hacking underground. According to Netenrich, this generative AI bot was trained for offensive purposes, such as creating spear phishing emails, conducting BEC attacks, cracking tools, and carding. ” concludes the report.

Artificial Intelligence 93

Artificial Intelligence Phishing Sales Marketing 93

Security Affairs

NOVEMBER 8, 2023

As of July 2023, the FBI observed ransomware operators exploiting vulnerabilities in vendor-controlled remote access to casino servers, and companies that were compromised through legitimate system management tools to elevate network permissions.

Ransomware 101

Ransomware Access Phishing Encryption 101

The Last Watchdog

SEPTEMBER 21, 2022

Phishing is one of the most common social engineering tactics cybercriminals use to target their victims. Cybersecurity experts are discussing a new trend in the cybercrime community called phishing-as-a-service. Phishing-as-a-Service (PhaaS). Ready-to-use phishing kits with all necessary attack items are available on the web.

Phishing 153

Phishing Artificial Intelligence Cybersecurity Compliance 153

Data Breach Today

AUGUST 10, 2023

Phishing Kit Primarily Used in Attacks Against Employees of Fortune 500 Companies Threat actors are taking control of cloud-based Microsoft 365 accounts of C-suite executives using a multi-factor authentication phishing tool.

Phishing 241

Phishing Authentication Cloud 241

IBM Big Data Hub

AUGUST 9, 2023

A phishing simulation is a cybersecurity exercise that tests an organization’s ability to recognize and respond to a phishing attack. During a phishing simulation, employees receive simulated phishing emails (or texts or phone calls) that mimic real-world phishing attempts. million phishing sites.

Phishing 75

Phishing Security awareness Cybersecurity Analytics 75

Data Breach Today

AUGUST 11, 2023

Phishing Kit Primarily Used in Attacks Against Employees of Fortune 500 Companies Threat actors are taking control of cloud-based Microsoft 365 accounts of C-suite executives using a multi-factor authentication phishing tool.

Phishing 238

Phishing Authentication Cloud 238

eSecurity Planet

AUGUST 23, 2023

Spear phishing is a more targeted and effective phishing technique that attempts to exploit specific individuals or groups within an organization. While phishing uses a broader range of tactics, such as mass emailing to random recipients, spear phishing is often well-researched and tailored to high-value targets.

Phishing 85

Phishing Authentication Security awareness Passwords 85

Security Affairs

JULY 16, 2023

Researchers from SlashNext warn of the dangers related to a new generative AI cybercrime tool dubbed WormGPT. WormGPT is advertised on underground forums as a perfect tool to carry out sophisticated phishing campaigns and business email compromise (BEC) attacks. ” reads the post published by Slashnext.

Artificial Intelligence 92

Artificial Intelligence Phishing Cybersecurity Ransomware 92