Security News

Subway Sandwich Loyalty-Card Users Suffer Ham-Handed Phishing Scam
2020-12-15 21:43

Count the Subway sandwich faithful among the latest victims of cybercriminals. Researchers at Sophos discovered a phishing campaign aimed at Subway loyalty-card members in the U.K. and Ireland, in an attempt to trick them into downloading malware.

Phishing tricks that really work – and how to avoid them
2020-12-15 19:16

Understanding the attackers' approach helps you spot a phishing email when it hits your inbox. In general, there are four main steps phishers go through when creating convincing phishing emails, and understanding these steps helps you to spot and stop them.

Massive Subway UK phishing attack is pushing TrickBot malware
2020-12-11 08:41

A massive phishing campaign pretending to be a Subway order confirmation is underway distributing the notorious TrickBot malware. TrickBot is a trojan malware infection commonly distributed through phishing campaigns or installed by other malware.

Watch out for holiday phishing scams
2020-12-10 19:57

Security company GreatHorn shared some of the latest ways cybercriminals are trying to take your money. Here's how to avoid them.

How phishing attacks continue to exploit COVID-19
2020-12-10 17:24

These phishing emails promise compensation, test results, and other lures about the coronavirus to trick unsuspecting users, says Armorblox. With 2020 almost over, such email attacks continue merrily on.

Phishing emails: More than 25% of American workers fall for them
2020-12-09 17:28

A new global report on phishing attempts shows how the workforce has responded to security threats since COVID-19, and the new vulnerabilities that have resulted from the remote work landscape. Terranova Security's new "2020 Gone Phishing Tournament," part of its Phishing Benchmark Global Report, looks at the impact of phishing attacks on the remote workforce, citing an increase in phishing simulation clicks, as well as compromised data.

MetaMask phishing steals cryptocurrency wallets via Google ads
2020-12-05 10:02

Over the past week, users of the MetaMask cryptocurrency wallet have been losing funds to a phishing scam that lured potential victims through Google search ads. Although it is unclear how many MetaMask users fell for the scam, some say they ended up with empty wallets after clicking on a fraudulent search ad being promoted as the MetaMask site.

Phishing campaign threatens coronavirus vaccine supply chain
2020-12-03 20:47

The emails impersonate a member company of the COVID-19 vaccine supply chain to harvest account credentials, says IBM Security X-Force. A calculated cybercriminal operation is targeting companies in the coronavirus vaccine supply chain with phishing emails that appear to be designed to steal sensitive user credentials, IBM Security X-Force said in a report released Thursday.

FINRA Warns Brokerage Firms of Phishing Campaign
2020-12-03 12:56

Cybercriminals are using a recently registered lookalike domain in a phishing campaign targeting United States organizations, FINRA warns. A government-authorized not-for-profit organization, FINRA regulates over 624,000 brokerage firms in the United States.

HMRC phishing scam abuses mail service to bypass spam filters
2020-12-02 17:10

Threat actors are exploiting legitimate SendGrid mailing service to spoof HMRC phishing emails that bypass spam filters. Email delivery service abused for spoofing HMRC emails.