Tag: phishing campaign

Source URL: https://blog.talosintelligence.com/gamaredon-campaign-distribute-remcos/ Source: Cisco Talos Blog Title: Gamaredon campaign abuses LNK files to distribute Remcos backdoor Feedly Summary: Cisco Talos is actively tracking an ongoing campaign, targeting users in Ukraine with malicious LNK files which run a PowerShell downloader since at least November 2024. AI Summary and Description: Yes **Summary:** The text details a…

The Register: After Chrome patches zero-day used to target Russians, Firefox splats similar bug

Mar 28, 2025

—

by

Source URL: https://www.theregister.com/2025/03/28/google_kaspersky_mozilla/ Source: The Register Title: After Chrome patches zero-day used to target Russians, Firefox splats similar bug Feedly Summary: Single click on a phishing link in Google browser blew up sandbox on Windows Google pushed out an emergency patch for Chrome on Windows this week to stop attackers exploiting a sandbox-breaking zero-day vulnerability,…

Cloud Blog: BitM Up! Session Stealing in Seconds Using the Browser-in-the-Middle Technique

Mar 17, 2025

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/session-stealing-browser-in-the-middle/ Source: Cloud Blog Title: BitM Up! Session Stealing in Seconds Using the Browser-in-the-Middle Technique Feedly Summary: Written by: Truman Brown, Emily Astranova, Steven Karschnia, Jacob Paullus, Nick McClendon, Chris Higgins Executive Summary The Rise of Browser in the Middle (BitM): BitM attacks offer a streamlined approach, allowing attackers to quickly compromise sessions…

Microsoft Security Blog: Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/13/phishing-campaign-impersonates-booking-com-delivers-a-suite-of-credential-stealing-malware/ Source: Microsoft Security Blog Title: Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware Feedly Summary: Starting in December 2024, leading up to some of the busiest travel days, Microsoft Threat Intelligence identified a phishing campaign that impersonates online travel agency Booking.com and targets organizations in the hospitality industry. The…

The Register: That ‘angry guest’ email from Booking.com? It’s a scam, not a 1-star review

—

by

Source URL: https://www.theregister.com/2025/03/13/bookingdotcom_phishing_campaign/ Source: The Register Title: That ‘angry guest’ email from Booking.com? It’s a scam, not a 1-star review Feedly Summary: Phishers check in, your credentials check out, Microsoft warns An ongoing phishing campaign disguised as a Booking.com email casts keystroke and credential-stealing malware into hospitality employees’ inboxes for financial fraud and theft, according…

The Register: Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand

—

by

Source URL: https://www.theregister.com/2025/03/13/medusa_ransomware_infects_300_critical/ Source: The Register Title: Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand Feedly Summary: Feds warn gang still rampant and now cracked 300+ victims around the world A crook who distributes the Medusa ransomware tried to make a victim cough up three payments instead of the…

Hacker News: ‘Uber for nurses’ exposes 86K+ medical records, PII via open S3 bucket

—

by

Source URL: https://www.websiteplanet.com/news/eshyft-report-breach/ Source: Hacker News Title: ‘Uber for nurses’ exposes 86K+ medical records, PII via open S3 bucket Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity incident involving the exposure of a non-password-protected database belonging to ESHYFT, a healthtech company. The incident raises critical issues about privacy…

Alerts: CISA and Partners Release Cybersecurity Advisory on Medusa Ransomware

Mar 12, 2025

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2025/03/12/cisa-and-partners-release-cybersecurity-advisory-medusa-ransomware Source: Alerts Title: CISA and Partners Release Cybersecurity Advisory on Medusa Ransomware Feedly Summary: Today, CISA—in partnership with the Federal Bureau of Investigation (FBI) and Multi-State Information Sharing and Analysis Center (MS-ISAC)—released joint Cybersecurity Advisory, #StopRansomware: Medusa Ransomware. This advisory provides tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), and detection…

Hacker News: Exposing Russian EFF Impersonators: The Inside Story on Stealc and Pyramid C2

Mar 6, 2025

—

by