Phishing

The Latest Malware Jester Stealer Warning in Ukraine from CERT-UA: Here’s Everything You Need to Know

by Brad | May 18, 2022 | Phishing

As the conflict between Russia and Ukraine escalates, the potential of utilizing more lethal weapons, which was previously merely a fear, may now take on a new form. The Ukrainian Computer Emergency Response Team (CERT-UA) has issued a warning about a huge distribution campaign based on the concept of a “chemical attack.” Receiving an email like this in Ukraine’s invasion-affected regions is sure to generate widespread panic. Jester Stealer, a malicious file capable of large-scale data theft, is back on the hunt.

(more…)

Voice Phishing: Surfacing of a New Cyber Threat on Whatsapp

by Brad | Apr 26, 2022 | Phishing

Researchers at Armorblox found a malicious campaign that targeted WhatsApp users. The attackers have reached over 27,660 email addresses through targeted phishing attacks appearing to be from WhatsApp. When receiving attachments over email, you might be tricked by the threat actor into downloading other forms of malicious software. The following sections discuss more details about the latest phishing scheme.

(more…)

Microsoft Azure Phishing Scam: The New Favorite Of Malicious Actors

by Brad | Apr 16, 2022 | Phishing

Microsoft Azure is one of the leading cloud services used by developers and organizations worldwide. With an easy subscription model, Azure is convenient and popular among its users. However, Azure has also become famous among cyber attackers that use it for phishing scams to exploit protected data.

(more…)

RTLO Phishing Scam Revival – Everything You Need to Know About this Age-old Cyber Threat

by Brad | Apr 5, 2022 | Phishing

The RTLO (or RLO) technique is one of the cybercriminals’ oldest and most common techniques. With the help of this technique, they can make a hyperlink look less suspicious, making you think that it is safe to click on it. However, once you click on the link, it might take you to the attacker’s domain that might ask you for confidential information under a suspicious ruse or download suspicious software on your local device.

(more…)

Latest Phishing Trends: Financial Services, Facebook, and Microsoft, the Biggest Impersonation Targets of Threat Actors

by Brad | Mar 14, 2022 | Phishing

Phishing remains the top method that cybercriminals use to target individuals and employees worldwide to lure them in and lead them to fake applications, websites, and payment portals to steal information and hard-earned money.

VadeSecure’s latest report highlights how financial services is the most impersonated sector today, along with Facebook and Microsoft taking the crown for the most impersonated brands by phishing criminals. It is imperative to understand the rising threat of phishing, the latest phishing scams, and how you can ensure your organization’s protection against phishing.

(more…)

Ice Phishing – A New Threat to Your Crypto Assets

by Brad | Mar 7, 2022 | Phishing

With its technological advancements, such as Web3, blockchain, and cryptocurrency, the digital world has become a breeding ground for new forms of cyberattacks. Even though people can take control of their finances, the ease with which malicious actors can gain access to and steal the digital currency stored online is terrifying.

(more…)

The surge of LinkedIn Phishing Attacks – Courtesy of the “The Great Resignation”

by Brad | Feb 28, 2022 | Phishing

Cybercriminals have always been actively looking for methods to breach security and acquire information that can be used as leverage over the victims. Due to the recent transition in the job market where individuals are always on the lookout for new and better opportunities, attackers have found a new method to exploit the vulnerabilities of jobseekers. The recent LinkedIn phishing attacks have proven how unguarded LinkedIn users are to such attacks.

(more…)

Two Decades-Old Phishing Attack Revamped

by Brad | Feb 18, 2022 | Phishing

The RLO technique is a simple technique that disguises malicious files making them seem like simple text files. When downloaded by the user, these files could damage their device or could be used to acquire sensitive information. Although this technique became outdated, recently, attackers started using it again as people lowered their guard against cyber attacks.

(more…)

Latest Phishing Campaign Targeting Microsoft Proves Why Not Having Multi-Factor Authentication is Risky for Organizations

by Brad | Feb 7, 2022 | Phishing

Phishing is the most frequently used break-in technique and an attack vector malicious actors have used for years. The latest report by the Microsoft 365 Defender Threat Intelligence Team warns of a new and powerful phishing campaign that targets employees’ bring-your-own-device(s) (BYODs). The attackers register their own devices in corporate networks and gradually make their way into internal and external corporate networks. In this phishing scam, the adversaries target the unmanaged devices within organizations to compromise networks and evade detection by taking advantage of the absence of security measures like multi-factor authentication (MFA) within organizations.

  (more…)

Threat Actors Exploit Adobe’s Creative Cloud

by Brad | Jan 28, 2022 | Phishing

Entrepreneurs using Adobe Creative Cloud as a part of their organizational operations need to guard against a new cyberattack model employed by threat actors. Other loopholes call for more robust countermeasures even when deploying adequate phishing solutions. Malicious actors are leveraging the popular application, Adobe Creative Cloud, to dispatch malicious links to users that seem legitimate. Failure to have robust email phishing protection mechanisms in place would compromise your credentials.

(more…)

Recent FIFA 22 Incident and Phishing Attacks in the Gaming industry

by Brad | Jan 22, 2022 | Phishing

There has been an unprecedented rise in gaming during the last few years, with smartphones making it more popular than ever. The gaming industry is valued at $165 billion, with current estimates of over 3.4 billion players worldwide. From a handful of game developers in the early years, the industry now has many options, ranging from individual contributors to substantial gaming providers, rolling out games by the dozen.

(more…)

Malicious Actors Exploit Commenting Feature In Google Docs to Send Phishing Emails

by Brad | Jan 17, 2022 | Phishing

According to a recent Axios report, over 2 million monthly active users use G Suite products. In the 2017 Google I/O Conference, the organization mentioned that Google Drive alone has over 800 million daily users, and this figure is only increasing. If someone were to exploit a vulnerability in this famous collaborative work and educational platform, the consequences would affect millions. In a recent incident, cyber adversaries have targeted G Suite product users, exploiting a vulnerability in the ‘Comment’ option available in Google Docs, Google Sheets, and Google Slides. Here are the details about the breach and some recommendations on how to stop phishing emails. (more…)

The Rise of Survey Scams in The Advertising Industry And The Precautions Organizations Need To Take To Prevent Such Scams

by Brad | Jan 8, 2022 | Phishing

Digitization has witnessed a sudden boom in online data storage, where not only work but entertainment, education, and communication have become dependent on the internet. Numerous survey scams are gaining popularity once again by promoting various products or free samples to users in return for their information. Scammers pretend to be some famous brand to steal the personal data of the victims using such scams. And everyone using the internet is not entirely accustomed to its usage, nor are they familiar with the features of such frauds.  (more…)

QR Code Phishing Attacks: Save Your Organization From The New Wave of Phishing Scams

by Brad | Jan 5, 2022 | Phishing

QR (Quick Response) codes have become widespread with the rise of smartphone usage. The COVID-19 epidemic, has accelerated digitization across industries, with online payments becoming a key component of this shift. However, malicious actors can exploit fake QR codes to redirect users from legitimate destinations to phishing websites. These “Quishing” attacks are increasingly common, with detection rates growing alongside research into online and email phishing. This article explores “Quishing” attacks, how to identify such scams, and methods to prevent phishing emails.

(more…)