Threat Actors Abuse Google Translate to Craft Phishing Links

Jan 20, 2025 8:03:56 AM By Stu Sjouwerman

Threat actors are abusing Google Translate’s redirect feature to craft phishing links that appear to belong to, according to researchers at Abnormal Security.

Phishing Campaign Attempts to Bypass iOS Protections

Jan 20, 2025 8:03:20 AM By Stu Sjouwerman

An SMS phishing (smishing) campaign is attempting to trick Apple device users into disabling measures designed to protect them against malicious links, BleepingComputer reports.

Ransomware Gangs Claimed More Than 5,000 Attacks in 2024

Jan 17, 2025 8:32:19 AM By Stu Sjouwerman

Ransomware groups claimed responsibility for 5,461 attacks in 2024, with 1,204 of these attacks being publicly confirmed by victim organizations, according to Comparitech’s latest ...

Japan Attributes More Than 200 Cyberattacks to China Threat Actor "MirrorFace"

Jan 15, 2025 10:34:45 AM By Stu Sjouwerman

Japan’s National Police Agency (NPA) has attributed more than 200 cyber incidents over the past five years to the China-aligned threat actor “MirrorFace,” Infosecurity Magazine reports.

Waging War on Explicit Deepfakes. The Real Problem Behind the UK Crackdown

Jan 13, 2025 8:17:17 AM By Javvad Malik

The UK government decided to wage war on explicit deepfakes. About time, right? But before we start celebrating, let's take a closer look.

Phishing Campaign Abuses Legitimate Services to Send PayPal Requests

Jan 9, 2025 4:37:41 PM By Stu Sjouwerman

A phishing campaign is abusing Microsoft 365 test domains to send legitimate payment requests from PayPal, according to Fortinet’s CISO Dr. Carl Windsor.

Malicious WordPress Plugin Assists in Phishing Attacks

Jan 9, 2025 4:36:54 PM By Stu Sjouwerman

Researchers at SlashNext warn that cybercriminals are using a WordPress plugin called “PhishWP” to spoof payment pages and steal financial information.

Phishing for Gamers: Fake Offers Invite Gamers to Test New Gaming Titles

Jan 8, 2025 9:56:43 AM By Stu Sjouwerman

A phishing campaign is targeting users with phony offers to beta test new video games, according to researchers at Malwarebytes.

Credential Phishing Increased by 703% in H2 2024

Jan 6, 2025 3:07:10 PM By Stu Sjouwerman

Credential phishing attacks surged by 703% in the second half of 2024, according to a report by SlashNext. Phishing attacks overall saw a 202% increase during the same period.

Tax-Themed Phishing Campaign Delivers Malware Via Microsoft Management Console Files

Jan 2, 2025 4:23:04 PM By Stu Sjouwerman

Securonix warns that tax-themed phishing emails are attempting to deliver malware via Microsoft Management Console (MSC) files.

Russia’s APT29 Launches Major Spear Phishing Campaign

Dec 23, 2024 5:14:23 PM By Stu Sjouwerman

Trend Micro warns that the Russian state-sponsored threat actor Earth Koshchei (also known as “APT29” or “Cozy Bear”) is using spear phishing emails to trick victims into connecting to ...

"Get Beyond Security Awareness Training" Does Not Mean Forgetting About It

Dec 23, 2024 5:13:52 PM By Roger Grimes

KnowBe4 is a big believer in focusing on decreasing human risk as the best way to decrease cybersecurity risk in most environments.

Mobile Phishing Attacks Use New Tactic to Bypass Security Measures

Dec 20, 2024 3:49:33 PM By Stu Sjouwerman

ESET has published its threat report for the second half of 2024, outlining a new social engineering tactic targeting mobile banking users.

Attackers Abuse HubSpot’s Free Form Builder to Craft Phishing Pages

Dec 20, 2024 3:49:08 PM By Stu Sjouwerman

A threat actor is abusing HubSpot’s Free Form Builder service to craft credential-harvesting phishing pages, according to Palo Alto Networks’ Unit 42.

Phishing Campaign Targets YouTube Creators

Dec 18, 2024 11:16:19 AM By Stu Sjouwerman

An email phishing campaign is targeting popular YouTube creators with phony collaboration offers, according to researchers at CloudSEK. The emails contain OneDrive links designed to trick ...

[Heads Up] Bad Actors Use Voice Phishing in Microsoft Teams To Spread DarkGate Malware

Dec 17, 2024 10:06:36 AM By Stu Sjouwerman

Threat actors are using voice phishing (vishing) attacks via Microsoft Teams in an attempt to trick victims into installing the DarkGate malware, according to researchers at Trend Micro.

U.S. Justice Department Indicts Fake IT Workers From North Korea

Dec 17, 2024 10:06:06 AM By Stu Sjouwerman

The U.S. Justice Department revealed indictments against 14 North Korean nationals for their involvement in a long-running scheme designed to pose as remote IT professionals.

Critical Infrastructure Under Siege: 42% Spike in Ransomware Attacks on Utilities

Dec 17, 2024 10:05:27 AM By Stu Sjouwerman

Ransomware attacks targeting utilities have surged by 42% over the past year, with spear phishing playing a major role in 81% of cases, according to a ReliaQuest study spanning November ...

94% of U.K. Businesses Aren’t Adequately Prepared for AI-Driven Phishing Scams

Dec 13, 2024 12:31:54 PM By Stu Sjouwerman

A new report makes it clear that U.K. organizations need to do more security awareness training to ensure their employees don’t fall victim to the evolving use of AI.

Sophisticated Phishing Campaign Attempts to Bypass SEGs

Dec 13, 2024 12:31:28 PM By Stu Sjouwerman

A widespread phishing campaign is attempting to steal credentials from employees working at dozens of organizations around the world, according to researchers at Group-IB.

Security Awareness Training Blog

View Topics