Browsing Tag
Phishing
681 posts
Global Group Ransomware Abuses WinMerge to Deploy Encryptor
Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises.
Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details
An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.
Hackers Use Hijacked University Emails to Scam Students, Pose as FBI Agent
Students, job seekers and university staff, watch out for fake job offers sent from legitimate university email accounts.
Email Makes Up Nearly 1 in 3 MSSP Analyses: How Tier 1 Can Triage Phishing Faster
MSSP Tier 1 analysts can cut phishing triage time with interactive analysis, fresh threat intelligence, clearer evidence and complete Tier 2 handoffs worldwide.
Microsoft Disrupts AI-Powered EvilTokens Service Linked to 12,000 Hacked Inboxes
Microsoft disrupted EvilTokens after the AI-powered phishing service compromised 12,000 inboxes across 10,000 organisations and enabled complex financial fraud.
Revolut Customers Targeted by Phishing Campaign After Data Breach
Revolut customers are being targeted with phishing texts days after a social engineering attack exposed sensitive customer data, including IDs and selfies.
Fake OpenAI Billing Emails Target ChatGPT Users in Credential Phishing Scam
Cofense researchers identified phishing emails impersonating OpenAI billing notices to steal ChatGPT credentials and payment information.
New GhostCode Phishing Kit Hijacks Microsoft Accounts Despite MFA
eSentire uncovers the GhostCode phishing kit abusing Microsoft OAuth to steal tokens, register attacker devices and access Microsoft 365 accounts.
Fake Sexual Misconduct Emails Target Universities with Zoho RAT
Cofense details a phishing campaign targeting healthcare-linked universities through Google Drive links that lead recipients to install Zoho RAT.
‘Spring Ring’ Vishing Attack Uses Fake IT Calls on Microsoft Teams to Install Malware
A new Teams vishing campaign called Spring Ring used fake IT support calls to trick employees into installing remote-access tools (RAT) and malware.