Security News

New Phishing Kit Xiū gǒu Targets Users Across Five Countries With 2,000 Fake Sites
2024-11-01 03:50

Cybersecurity researchers have disclosed a new phishing kit that has been put to use in campaigns targeting Australia, Japan, Spain, the U.K., and the U.S. since at least September 2024. Netcraft...

Midnight Blizzard Escalates Spear-Phishing Attacks On Over 100 Organizations
2024-10-31 18:10

Russian hackers, known as Midnight Blizzard, launch targeted spear-phishing on U.S. officials, exploiting RDP files to gain access to data.

Russian spies use remote desktop protocol files in unusual mass phishing drive
2024-10-30 12:40

The prolific Midnight Blizzard crew cast a much wider net in search of scrummy intel Microsoft says a mass phishing campaign by Russia's foreign intelligence services (SVR) is now in its second...

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA
2024-10-24 11:00

Sometimes, it turns out that the answers we struggled so hard to find were sitting right in front of us for so long that we somehow overlooked them. When the Department of Homeland Security,...

AI and deepfakes fuel phishing scams, making detection harder
2024-10-24 03:00

AI impersonation is now the hardest vector for cybersecurity professionals to protect companies against, according to Teleport. The study, which surveyed 250 senior US and UK decision-makers,...

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans
2024-10-22 17:06

Russian-speaking users have become the target of a new phishing campaign that leverages an open-source phishing toolkit called Gophish to deliver DarkCrystal RAT (aka DCRat) and a previously...

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies
2024-10-22 10:00

Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame have resurfaced as part of new phishing campaigns. Bumblebee and Latrodectus,...

Phishing scams and malicious domains take center stage as the US election approaches
2024-10-22 04:00

Phishing scams aimed at voters, malicious domain registrations impersonating candidates, and other threat activity designed to exploit unassuming victims take center stage as the US election...

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack
2024-10-16 07:20

A new spear-phishing campaign targeting Brazil has been found delivering a banking malware called Astaroth (aka Guildma) by making use of obfuscated JavaScript to slip past security guardrails....

GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks
2024-10-11 17:13

A new tax-themed malware campaign targeting insurance and finance sectors has been observed leveraging GitHub links in phishing email messages as a way to bypass security measures and deliver...