Latest Phishing Scam Uses Cross-Site Scripting Attack to Harvest Personal Details

Aug 15, 2024 10:55:02 AM By Stu Sjouwerman

Cross-Site Scripting (XSS) is alive and well, and used in attacks to obfuscate malicious links in phishing emails to redirect users to threat-actor controlled websites.

Chameleon Malware Poses as CRM App

Aug 13, 2024 1:54:29 PM By Stu Sjouwerman

Researchers at ThreatFabric warn that a phishing campaign is distributing the Chameleon Android malware by impersonating a Customer Relationship Management (CRM) app. The campaign is ...

Attackers Abuse Google Drawings to Host Phishing Pages

Aug 13, 2024 8:30:00 AM By Stu Sjouwerman

Researchers at Menlo Security warn that a phishing campaign is exploiting Google Drawings to evade security filters.

New Phishing Campaign Targets Israeli Organizations To Deliver Malware

Aug 8, 2024 3:36:17 PM By Stu Sjouwerman

A new phishing campaign is targeting Israeli organizations to deliver the RHADAMANTHYS information-stealing malware, Cyber Security News reports.

[On-Demand Webinar] 2024 Phishing Insights: What 11.9 Million User Behaviors Reveal About Your Risk

Aug 8, 2024 8:30:00 AM By Stu Sjouwerman

Your secret weapon to combat cyber threats might be just under your nose! Cybercriminals continue to exploit vulnerabilities while upping their game with new and more sinister attack ...

62% of Phishing Emails Bypassed DMARC Checks in 1H of 2024

Aug 7, 2024 3:32:01 PM By Stu Sjouwerman

A report from Darktrace has found that 62% of phishing emails in the first half of 2024 were able to bypass DMARC verification checks in order to reach users’ inboxes.

“Pastejacking” Attacks Are Becoming a Thing (Because Users are Falling for Them)

Aug 7, 2024 3:29:49 PM By Stu Sjouwerman

New analysis shows users can be convinced to copy and paste malicious code on behalf of the attacker.

AI Tools Have Increased the Sophistication of Social Engineering Attacks

Aug 6, 2024 2:04:50 PM By Stu Sjouwerman

The Cyber Security Agency of Singapore (CSA) has warned that threat actors are increasingly using AI to enhance phishing and other social engineering attacks, Channel News Asia reports.

New Malvertising Campaign Impersonates Google Authenticator

Aug 6, 2024 2:04:46 PM By Stu Sjouwerman

Researchers at Malwarebytes spotted a malvertising campaign that abused Google Ads to target people searching for Google Authenticator.

Brand Impersonation of Microsoft Increases 50% in One Quarter

Aug 5, 2024 4:30:25 PM By Stu Sjouwerman

The use of the Microsoft brand in phishing attacks demonstrates both its widespread credibility as well as the continued success of attacks leveraging it.

Your Users Still Fall For Phishing Attacks Because of URL Shorteners

Aug 2, 2024 3:58:11 PM By Stu Sjouwerman

Analysis of current phishing attacks by security researchers have uncovered an increase in the use of trusted shortlink services.

New Research: Smaller Companies Receiving Higher Rates Of Phishing Emails

Aug 2, 2024 9:44:44 AM By Stu Sjouwerman

Researchers at Barracuda have found that smaller companies tend to receive a higher rate of phishing attacks spread across the organization, according to a report looking at the phishing ...

Half of Travel-Themed Spam Emails Are Scams

Jul 31, 2024 1:31:04 PM By Stu Sjouwerman

Researchers at Bitdefender have found that half of all travel-themed spam emails contain scams.

The First Half of 2024 Results in More Than 1 Billion Data Breach Victims

Jul 31, 2024 1:31:00 PM By Stu Sjouwerman

New data shows that cyber attacks have resulted in double the number of data breaches in 2024 than throughout all of 2023.

New Phishing Kit Uses Voice Call Generator to Impersonate Spanish Banks

Jul 30, 2024 1:47:23 PM By Stu Sjouwerman

A new cybercriminal group is selling “a sophisticated AI-powered phishing-as-a-service platform” that targets 36 Spanish banks, according to researchers at Group-IB.

Scammers Exploit Interest in Generative AI Tools

Jul 29, 2024 1:50:36 PM By Stu Sjouwerman

Researchers at Palo Alto Networks’s Unit 42 are tracking phishing attacks exploiting interest in generative AI tools. The researchers observed spikes in suspicious domain registrations ...

QR Code Phishing is Still on the Rise. The SEG is Dead.

Jul 29, 2024 8:19:34 AM By Stu Sjouwerman

Organizations need to be aware of the threat posed by QR code phishing (quishing), according to researchers at Trend Micro.

New Phishing Scam Leverages Chat To Add Credibility And Ensure Success

Jul 26, 2024 11:53:18 AM By Stu Sjouwerman

A new phishing scam is leveraging trusted aspects of ecommerce to make their scams look legitimate.

Phishing Campaigns Continue To Exploit CrowdStrike Outage

Jul 26, 2024 8:34:01 AM By Stu Sjouwerman

As expected, threat actors are taking advantage of the global IT outage caused by a faulty CrowdStrike update last Friday, SC Media reports.

Russian Super-Threat Group Fin7 Comes Back from the Dead

Jul 26, 2024 8:33:58 AM By Stu Sjouwerman

Declared “dead” by the U.S. Attorney’s Office in 2023, the Russian cyber crime group Fin7 is impersonating some of the top global brands.

Security Awareness Training Blog

Phishing Blog

View Topics