Security News

Tricky Phish Angles for Persistence, Not Passwords
2020-01-07 21:35

First, while the most recent versions of this stealthy phish targeted corporate users of Microsoft's Office 365 service, the same approach could be leveraged to ensnare users of many other cloud providers. In early December, security experts at PhishLabs detailed a sophisticated phishing scheme targeting Office 365 users that used a malicious link which took people who clicked to an official Office 365 login page - login.

News Wrap: APTs, Office 365 Voicemail Phish and Bed Bath & Beyond Breach
2019-11-01 19:32

Threatpost editors discuss this week's biggest news - from a data breach of Bed Bath & Beyond, a tricky phishing attack and widespread APT activity.

New Way Found to Use Alexa, Google to ‘Voice Phish’ and Eavesdrop on Users
2019-10-21 11:03

Developer interfaces used by Security Research Labs researchers to turn digital home assistants into ‘Smart Spies’.

Watch out for this latest LinkedIn phish that’s ‘sent’ by a friend
2019-10-15 20:02

We recently showed you how crooks rip off social networking passwords - here's what they do with stolen accounts.

Phish Uses Google’s URL Decoding to Swim Past Defenses
2019-09-26 15:10

Percentage-based URL encoding plus Google domain trickery is helping malicious emails to evade filters.

Instagram phish poses as copyright infringement warning – don’t click!
2019-09-24 09:26

Your Instagram account has value to the crooks - so they're coming up with some cunning tricks to get at your passsword.

Employers Beware: Microsoft Word ‘Resume’ Phish Delivers Quasar RAT
2019-08-27 18:20

A round of phishing emails purports to be from job seekers - but actually uses a slew of detection evasion tactics to download malware on victim systems.

Energy Sector Phish Swims Past Microsoft Email Security via Google Drive
2019-08-15 18:49

The savvy technique of avoiding malicious links in the email allowed the phishing attack to reach its targets.

Cryptocurrency phish dials back the fear, cranks up the politeness
2019-06-27 23:49

Spammers and scammers are getting better at spelling and grammar - so make sure you aren't relying on language alone to spot phishes...

No Invitation Required: Hackers Can Phish Evite Users
2019-06-11 12:33

Social-Planning Website Says Pre-2014 User Database Has Been StolenOnline invitation site Evite has been hacked and information on an unspecified number of users stolen. In a data minimization...