Experimental News Clipping Site

Tag: phishing attack

  • Cisco Talos Blog: State-of-the-art phishing: MFA bypass

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/state-of-the-art-phishing-mfa-bypass/ Source: Cisco Talos Blog Title: State-of-the-art phishing: MFA bypass Feedly Summary: Threat actors are bypassing MFA with adversary-in-the-middle attacks via reverse proxies. Phishing-as-a-Service tools like Evilproxy make these threats harder to detect. AI Summary and Description: Yes Summary: The text outlines the evolving landscape of phishing attacks, specifically focusing on sophisticated techniques…

  • Slashdot: Alleged ‘Scattered Spider’ Member Extradited to US

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/04/30/2234218/alleged-scattered-spider-member-extradited-to-us?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Alleged ‘Scattered Spider’ Member Extradited to US Feedly Summary: AI Summary and Description: Yes Summary: The text covers the extradition of a Scottish cybercriminal, Tyler Robert Buchanan, who is linked to the Scattered Spider hacking group. His involvement includes significant wire fraud and identity theft, with implications for information…

  • Krebs on Security: Alleged ‘Scattered Spider’ Member Extradited to U.S.

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/04/alleged-scattered-spider-member-extradited-to-u-s/ Source: Krebs on Security Title: Alleged ‘Scattered Spider’ Member Extradited to U.S. Feedly Summary: A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft.…

  • Cisco Talos Blog: Year in Review: AI based threats

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/year-in-review-ai-based-threats/ Source: Cisco Talos Blog Title: Year in Review: AI based threats Feedly Summary: 2024 wasn’t the year that AI rewrote the cybercrime playbook — but it did turbocharge some of the old tricks. Read this summary of AI-based threats, from Talos’ 2024 Year in Review. AI Summary and Description: Yes Summary: The…

  • CSA: Phishing Tests: Key Questions to Ask

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schellman.com/blog/penetration-testing/phishing-tests-what-your-provider-should-be-telling-you Source: CSA Title: Phishing Tests: Key Questions to Ask Feedly Summary: AI Summary and Description: Yes **Summary:** The text provides valuable insights into the considerations organizations must evaluate when engaging third-party providers for phishing assessments. It highlights best practices that enhance the effectiveness of these assessments, emphasizing the evolving nature of phishing…

  • The Register: Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/25/darcula_ai/ Source: The Register Title: Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry Feedly Summary: Because coding phishing sites from scratch is a real pain in the neck Darcula, a cybercrime outfit that offers a phishing-as-a-service kit to other criminals, this week added AI capabilities to…

  • Wired: Gmail’s New Encrypted Messages Feature Opens a Door for Scams

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/gmail-end-to-end-encryption-scams/ Source: Wired Title: Gmail’s New Encrypted Messages Feature Opens a Door for Scams Feedly Summary: Google is rolling out an end-to-end encrypted email feature for business customers, but it could spawn phishing attacks, particularly in non-Gmail inboxes. AI Summary and Description: Yes Summary: Google is introducing an end-to-end encrypted email feature aimed…

  • Unit 42: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/phishing-campaign-with-complex-attack-chain/ Source: Unit 42 Title: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis Feedly Summary: Agent Tesla, Remcos RAT and XLoader delivered via a complex phishing campaign. Learn how attackers are using multi-stage delivery to hinder analysis. The post Cascading Shadows: An Attack Chain Approach to Avoid Detection and…