Browsing Tag
Phishing
672 posts
‘Spring Ring’ Vishing Attack Uses Fake IT Calls on Microsoft Teams to Install Malware
A new Teams vishing campaign called Spring Ring used fake IT support calls to trick employees into installing remote-access tools (RAT) and malware.
24,700 Fake Debt Relief Emails Target Over 9,000 Organizations in 14 Days
The fake debt relief emails contain no malicious links or attachments, but direct recipients to attacker-controlled phone numbers for vicrim's data.
RecruitTrap Scam Uses Fake Interview Invites to Steal Corporate Logins
RecruitTrap scam uses fake recruitment pages on mobile devices to hide URL clues, reject personal emails and steal corporate login credentials.
US Charges 17 Iranian Hackers Over Theft of 31.5TB of Academic Data
US prosecutors charge 17 Iranians hackers over an alleged campaign that stole 31.5TB of research and targeted universities, companies and government agencies worldwide.
Phishing Rates Fell 8x When a Crypto Exchange Started Simulating the Attacks
Crypto firms are investing more in phishing simulations and behavioral defenses as social engineering emerges as a major driver of crypto security incidents.
Kali365 Exploits Microsoft Device Login to Access US Corporate Data
Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.
Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts
Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens.
“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows…
Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones
Group-IB says scammers are targeting Céline Dion fans through Facebook, duplicate digital tickets and fake websites impersonating Ticketmaster, AXS and the venue site.
Armored Likho Hits Government, Energy Sectors With BusySnake Stealer
Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.