Phishing Archives - CyberConvoy Blog

New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages

The authentic-looking decoy pages function as a reverse proxy to harvest credentials and time-based one-time passwords (TOTPs) entered by the victims

13 May

New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets

Users may be manipulated into downloading and executing the malware under the guise of legitimate software

5 May

Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

Federal Civilian Executive Branch (FCEB) agencies are required to apply vendor-provided fixes by May 22, 2023, to secure their networks against these active threats

2 May

Google ads push BumbleBee malware used by ransomware gangs

Considering that the trojanized software is targeting corporate users, infected devices make candidates for the beginning of ransomware attacks

27 April

QBot Expands Initial Access Malware Strategy With PDF-WSF Combo

Qbot's use of a new email distribution method was detected — PDF attachments that download Windows Script Files to install Qbot on victims' devices

19 April

Hacked sites caught spreading malware via fake Chrome updates

If a targeted visitor browses the site, the scripts will display a fake Google Chrome error screen stating that an automatic update required to continue browsing the site failed to install

12 April

Hackers use Rilide browser extension to bypass 2FA, steal crypto

The malware is designed to monitor browser activity, take screenshots, and steal cryptocurrency and email account credentials through scripts injected into web pages

7 April

QNAP warns customers to patch Linux Sudo flaw in NAS devices

Successful exploitation on unpatched devices using Sudo versions 1.8.0 through 1.9.12p1 could enable attackers to escalate privileges by editing unauthorized files

1 April