A noteworthy threat group, TA575, has been observed using holiday-themed lures in its recent attack campaigns. The main goal of the campaigns is to lure victims into downloading the banking trojan, Dridex. click here...
A series of malvertising campaigns by Magnat group are infecting users via fake popular games and app installers. It spreads two commodity password stealers Azorult and Redline, MagnatBackdoor, and MagnatExtension. These threats are very effective...
Researchers believe that the malvertising campaigns target users interested in software-related keywords. This campaign is gaining momentum as an effective way to harvest information from unsuspecting users. click here to read full Article Read...
Microsoft has always been the target of phishing attacks. A new wave of phishing attacks is using fake Office 365 notifications with an aim to steal victims’ Microsoft credentials. click here to read full...
Trend Micro researchers discovered a new cryptocurrency-related campaign that abuses a legitimate Russian RAT known as Safib Assistant via a newer version of the malware called SpyAgent. click here to read full Article Read...
FakeDataGen is a Full Valid Fake Data Generator. This tool helps you to create fake accounts (in Spanish format) with fully valid data. Within this information, you can find the most common names, emails,...
Kaspersky’s researchers observed various lures aimed at targets, depending on their current streaming subscription status. Fake sign-up pages were used to pry email addresses and credit-card data. click here to read full Article Read...
Analysts at SOS Intelligence found several underground forums offering fake exploits for SS7 vulnerabilities. During the investigation, the researchers uncovered 84 unique onion domains claiming to offer the fake exploit tool. click here to...
A new wave of attacks starting late last week has hacked close to 300 WordPress sites to display fake encryption notices, trying to trick the site owners into paying 0.1 bitcoin for restoration. click...
The U.S. Federal Bureau of Investigation (FBI) on Saturday confirmed unidentified threat actors have breached one of its email servers to blast hoax messages about a fake “sophisticated chain attack.” The incident, which was...
The email servers of the FBI were hacked to distribute spam email impersonating the Department of Homeland Security (DHS) warnings of fake sophisticated chain attacks from an advanced threat actor. The message tells the...
A MasterFred sample was first submitted to VirusTotal in June 2021 and was first spotted in June. It also targets banking customers using fake login overlays in different languages. click here to read full...
The U.S. Secret Service confirmed that it has seen a “marked increase” in sham job ads seeking to steal people’s personal data, often with the aim of filing bogus unemployment insurance claims. click here...
The FIN7 hacking group is attempting to join the highly profitable ransomware space by creating fake cybersecurity companies that conduct network attacks under the guise of pentesting. click here to read full Article Read...
The financially motivated FIN7 gang has masqueraded as yet another fictitious cybersecurity company called “Bastion Secure” to recruit unwitting software engineers under the guise of penetration testing in a likely lead-up to a ransomware...
According to research by Intel 471, the vaccine trade is still strong, but numerous cybercriminals are now also offering fake COVID-19 vaccine certifications focused on US and EU entry requirements. click here to read...
