Security News

Banking scam uses Docusign phish to thieve 2FA codes
2021-10-26 18:57

It's easy to forget that the "Obviousness" of many scam emails comes from the fact that the crooks never intended those scams for us in the first place. We received a phish this morning that specifically targeted one of the main South African banks.

Tech support scams becoming the top phishing threat to consumers
2021-10-22 03:30

The latest findings show tech support scams, which often arrive as a pop-up alert convincingly disguised using the names and branding of major tech companies, have become the top phishing threat to consumers. Tech support scams are expected to proliferate in the upcoming holiday season, as well as shopping and charity-related phishing attacks.

S3 Ep55: Live malware, global encryption, dating scams, and secret emanations [Podcasts]
2021-10-21 18:13

Hook up with our forthcoming Live Malware Demo presentation. Why we think you should celebrate Global Encryption Day.

Textbook Rental Scam
2021-10-20 11:16

Here’s a story of someone who, with three compatriots, rented textbooks from Amazon and then sold them instead of returning them. They used gift cards and prepaid credit cards to buy the books, so...

Tech support scams top list of latest phishing threats
2021-10-19 15:30

Tech support scams work because they try to trick people into believing there's a serious security crisis with their computers, says Norton Labs. The tech support ruse was the number one scam described by Norton Labs in its new October Consumer Cyber Safety Pulse Report.

CryptoRom Scam Rakes in $1.4M by Exploiting Apple Enterprise Features
2021-10-14 15:17

Pyramid-scheme cryptocurrency scammers are exploiting Apple's Enterprise Developer Program to get bogus trading apps onto their marks' iPhones. They scammers are using a loophole that allows enterprise mobile device management programs to control corporate-owned iOS devices, according to Sophos' analysis, via Apple's Enterprise Developer program - specifically, the Apple Enterprise/Corporate Signature feature.

Romance scams with a cryptocurrency twist – new research from SophosLabs
2021-10-13 18:01

All those dubious excuses needed by traditional romance scammers to talk you into using wire transfer services to send money, or into buying them gift cards and sending through the redemption codes, are replaced by a sense of structure: there's a genuine app for this investment! The cryptorom scammers will even offer you an app if you have an iPhone, where Apple's "Walled garden" approach of requiring all consumer app downloads to come from the Apple App Store almost certainly persuades many victims that the cryptorom app must indeed have some sort of official authorisation or approval.

Bank of America insider charged with money laundering for BEC scams
2021-10-09 16:08

BEC scams use various tactics to compromise or impersonate business email accounts with the end goal of redirecting pending or future payments to bank accounts under a threat actor's control. One of the case examples in the indictment document seen by Bleeping Computer, mentions a single transaction of $356,954, sent by a victim in Boston to what they thought was the bank account of their business partner.

Ukraine takes down call centers behind cryptocurrency investor scams
2021-09-28 13:25

The Security Service of Ukraine has taken down a network of six call centers in Lviv, used by a ring of scammers to defraud cryptocurrency investors worldwide. Fraudsters behind these illegal call centers used VoIP phone numbers to hide their locations while scamming thousands of foreign investors.

Fake 'BT' caller fleeces elderly victim of £30k in APP app scam
2021-09-27 12:58

Police have issued an urgent warning after an elderly man was scammed out of £30,000 by phone fraudsters pretending to be from BT. The incident happened last Thursday, prompting West Mercia Police to issue a bulletin warning people to be on their guard against suspicious phone calls. Once the app was downloaded, they then convinced the man to log in using his online banking details and thereafter to transfer a sum of money to another account for "Safekeeping."