US Political Campaigns Targeted by Iranian Spear Phishing Attacks

Aug 21, 2024 4:02:10 PM By Stu Sjouwerman

Researchers at Recorded Future’s Insikt Group warn that the Iranian state-sponsored threat actor “GreenCharlie” is launching spear phishing attacks against US political campaigns.

Phishing Scammers Leverage Microsoft Dynamics 365 to Target US Government Contractors

Aug 21, 2024 4:02:07 PM By Stu Sjouwerman

Analysis of a phishing campaign targeting thousands of government contractors, dubbed “Operation Uncle Sam,” takes advantage of some sophisticated steps to avoid detection.

Threat Actors Abuse URL Rewriting to Mask Phishing Links

Aug 21, 2024 2:33:55 PM By Stu Sjouwerman

Threat actors are abusing a technique called “URL rewriting” to hide their phishing links from security filters, according to researchers at Perception Point.

Cybersecurity in 2024: Reflecting on the Past, Preparing for the Future

Aug 21, 2024 2:33:51 PM By Martin Kraemer

As Europe is returning from summer breaks, it is time to reflect on the first half of 2024 and look forward to the rest of the year.

U.K. Management Almost Twice as Likely to Fall for Phishing Attacks Versus Entry-Level Employees

Aug 19, 2024 1:58:47 PM By Stu Sjouwerman

Highlights from a new survey focused on employee compliance reveals just how targeted and susceptible U.K. businesses are to phishing attempts.

Ransomware Group Known as ‘Royal’ Rebrands as BlackSuit and Is Leveraging New Attack Methods

Aug 19, 2024 8:34:46 AM By Stu Sjouwerman

The ransomware threat group formerly known as "Royal" has rebranded itself as BlackSuit and updated their attack methods, warns the FBI.

Is Disabling Clickable URL Links Enough?

Aug 19, 2024 8:34:42 AM By Roger Grimes

Recently, we had a customer reach out to ask if disabling clickable uniform resource locator (URL) links in emails was enough protection by itself to potentially not need employee ...

File-Sharing Phishing Attacks Increased by 350% Over the Past Year

Aug 15, 2024 12:28:38 PM By Stu Sjouwerman

File-sharing phishing attacks have skyrocketed over the past year, according to a new report from Abnormal Security.

Latest Phishing Scam Uses Cross-Site Scripting Attack to Harvest Personal Details

Aug 15, 2024 10:55:02 AM By Stu Sjouwerman

Cross-Site Scripting (XSS) is alive and well, and used in attacks to obfuscate malicious links in phishing emails to redirect users to threat-actor controlled websites.

Chameleon Malware Poses as CRM App

Aug 13, 2024 1:54:29 PM By Stu Sjouwerman

Researchers at ThreatFabric warn that a phishing campaign is distributing the Chameleon Android malware by impersonating a Customer Relationship Management (CRM) app. The campaign is ...

Attackers Abuse Google Drawings to Host Phishing Pages

Aug 13, 2024 8:30:00 AM By Stu Sjouwerman

Researchers at Menlo Security warn that a phishing campaign is exploiting Google Drawings to evade security filters.

New Phishing Campaign Targets Israeli Organizations To Deliver Malware

Aug 8, 2024 3:36:17 PM By Stu Sjouwerman

A new phishing campaign is targeting Israeli organizations to deliver the RHADAMANTHYS information-stealing malware, Cyber Security News reports.

[On-Demand Webinar] 2024 Phishing Insights: What 11.9 Million User Behaviors Reveal About Your Risk

Aug 8, 2024 8:30:00 AM By Stu Sjouwerman

Your secret weapon to combat cyber threats might be just under your nose! Cybercriminals continue to exploit vulnerabilities while upping their game with new and more sinister attack ...

62% of Phishing Emails Bypassed DMARC Checks in 1H of 2024

Aug 7, 2024 3:32:01 PM By Stu Sjouwerman

A report from Darktrace has found that 62% of phishing emails in the first half of 2024 were able to bypass DMARC verification checks in order to reach users’ inboxes.

“Pastejacking” Attacks Are Becoming a Thing (Because Users are Falling for Them)

Aug 7, 2024 3:29:49 PM By Stu Sjouwerman

New analysis shows users can be convinced to copy and paste malicious code on behalf of the attacker.

AI Tools Have Increased the Sophistication of Social Engineering Attacks

Aug 6, 2024 2:04:50 PM By Stu Sjouwerman

The Cyber Security Agency of Singapore (CSA) has warned that threat actors are increasingly using AI to enhance phishing and other social engineering attacks, Channel News Asia reports.

New Malvertising Campaign Impersonates Google Authenticator

Aug 6, 2024 2:04:46 PM By Stu Sjouwerman

Researchers at Malwarebytes spotted a malvertising campaign that abused Google Ads to target people searching for Google Authenticator.

Brand Impersonation of Microsoft Increases 50% in One Quarter

Aug 5, 2024 4:30:25 PM By Stu Sjouwerman

The use of the Microsoft brand in phishing attacks demonstrates both its widespread credibility as well as the continued success of attacks leveraging it.

Your Users Still Fall For Phishing Attacks Because of URL Shorteners

Aug 2, 2024 3:58:11 PM By Stu Sjouwerman

Analysis of current phishing attacks by security researchers have uncovered an increase in the use of trusted shortlink services.

New Research: Smaller Companies Receiving Higher Rates Of Phishing Emails

Aug 2, 2024 9:44:44 AM By Stu Sjouwerman

Researchers at Barracuda have found that smaller companies tend to receive a higher rate of phishing attacks spread across the organization, according to a report looking at the phishing ...

Security Awareness Training Blog

Phishing Blog

View Topics