Phishing Archives - Page 2 of 5

Hacked sites caught spreading malware via fake Chrome updates

If a targeted visitor browses the site, the scripts will display a fake Google Chrome error screen stating that an automatic update required to continue browsing the site failed to install

12 April

Hackers use Rilide browser extension to bypass 2FA, steal crypto

The malware is designed to monitor browser activity, take screenshots, and steal cryptocurrency and email account credentials through scripts injected into web pages

7 April

QNAP warns customers to patch Linux Sudo flaw in NAS devices

Successful exploitation on unpatched devices using Sudo versions 1.8.0 through 1.9.12p1 could enable attackers to escalate privileges by editing unauthorized files

1 April

Microsoft OneNote will block 120 dangerous file extensions

Threat actors create malicious Microsoft OneNote documents by embedding dangerous files and scripts and then hiding them with design elements

1 April

Emotet malware distributed as fake W-9 tax forms from the IRS

Once Emotet is installed, the malware will steal victims' emails to use in future reply-chain attacks, send further spam emails

27 March

Large-Scale Use of Phishing Kits Sends Millions of Emails Daily

Such attacks are more effective because they circumvent multi-factor authentication (MFA) protections

18 March

Emotet malware returns after a three-month break

Emotet is a notorious malware distributed through email containing malicious Microsoft Word and Excel document attachments

10 March

Business email compromise attacks can take only a few hours

According to FBI data, from June 2016 until July 2019, BEC attacks resulted in losses amounting to over $43 billion

10 March

How to Prevent Callback Phishing Attacks

A combination of targeted security tools and a strong cybersecurity culture is the dual approach organizations can use to protect their network from an attack

1 March

Reddit Suffers Security Breach Exposing Internal Documents and Source Code

The spear-phishing messages redirected users to a website mimicking the company’s intranet gateway, designed to trick victims into providing credentials and second-factor tokens

11 February

Phishing Archives - Page 2 of 5 - CyberConvoy Blog