phishing campaigns – Page 2 – Experimental News Clipping Site

Krebs on Security: Alleged ‘Scattered Spider’ Member Extradited to U.S.

Apr 30, 2025

—

by

Source URL: https://krebsonsecurity.com/2025/04/alleged-scattered-spider-member-extradited-to-u-s/ Source: Krebs on Security Title: Alleged ‘Scattered Spider’ Member Extradited to U.S. Feedly Summary: A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft.…

Krebs on Security: China-based SMS Phishing Triad Pivots to Banks

Apr 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://krebsonsecurity.com/2025/04/china-based-sms-phishing-triad-pivots-to-banks/ Source: Krebs on Security Title: China-based SMS Phishing Triad Pivots to Banks Feedly Summary: China-based purveyors of SMS phishing kits are enjoying remarkable success converting phished payment card data into mobile wallets from Apple and Google. Until recently, the so-called “Smishing Triad” mainly impersonated toll road operators and shipping companies. But experts…

Microsoft Security Blog: Threat actors leverage tax season to deploy tax-themed phishing campaigns

Apr 3, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/04/03/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns/ Source: Microsoft Security Blog Title: Threat actors leverage tax season to deploy tax-themed phishing campaigns Feedly Summary: As Tax Day approaches in the United States on April 15, Microsoft has detected several tax-themed phishing campaigns employing various tactics. These campaigns use malicious hyperlinks and attachments to deliver credential phishing and malware including…

Cisco Talos Blog: Gamaredon campaign abuses LNK files to distribute Remcos backdoor

Mar 28, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/gamaredon-campaign-distribute-remcos/ Source: Cisco Talos Blog Title: Gamaredon campaign abuses LNK files to distribute Remcos backdoor Feedly Summary: Cisco Talos is actively tracking an ongoing campaign, targeting users in Ukraine with malicious LNK files which run a PowerShell downloader since at least November 2024. AI Summary and Description: Yes **Summary:** The text details a…

Cloud Blog: BitM Up! Session Stealing in Seconds Using the Browser-in-the-Middle Technique

Mar 17, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/session-stealing-browser-in-the-middle/ Source: Cloud Blog Title: BitM Up! Session Stealing in Seconds Using the Browser-in-the-Middle Technique Feedly Summary: Written by: Truman Brown, Emily Astranova, Steven Karschnia, Jacob Paullus, Nick McClendon, Chris Higgins Executive Summary The Rise of Browser in the Middle (BitM): BitM attacks offer a streamlined approach, allowing attackers to quickly compromise sessions…

Microsoft Security Blog: Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware

Mar 13, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/13/phishing-campaign-impersonates-booking-com-delivers-a-suite-of-credential-stealing-malware/ Source: Microsoft Security Blog Title: Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware Feedly Summary: Starting in December 2024, leading up to some of the busiest travel days, Microsoft Threat Intelligence identified a phishing campaign that impersonates online travel agency Booking.com and targets organizations in the hospitality industry. The…

The Register: Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand

Mar 13, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/03/13/medusa_ransomware_infects_300_critical/ Source: The Register Title: Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand Feedly Summary: Feds warn gang still rampant and now cracked 300+ victims around the world A crook who distributes the Medusa ransomware tried to make a victim cough up three payments instead of the…

Hacker News: ‘Uber for nurses’ exposes 86K+ medical records, PII via open S3 bucket

Mar 13, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.websiteplanet.com/news/eshyft-report-breach/ Source: Hacker News Title: ‘Uber for nurses’ exposes 86K+ medical records, PII via open S3 bucket Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity incident involving the exposure of a non-password-protected database belonging to ESHYFT, a healthtech company. The incident raises critical issues about privacy…

Alerts: CISA and Partners Release Cybersecurity Advisory on Medusa Ransomware

Mar 12, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2025/03/12/cisa-and-partners-release-cybersecurity-advisory-medusa-ransomware Source: Alerts Title: CISA and Partners Release Cybersecurity Advisory on Medusa Ransomware Feedly Summary: Today, CISA—in partnership with the Federal Bureau of Investigation (FBI) and Multi-State Information Sharing and Analysis Center (MS-ISAC)—released joint Cybersecurity Advisory, #StopRansomware: Medusa Ransomware. This advisory provides tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), and detection…

Hacker News: Exposing Russian EFF Impersonators: The Inside Story on Stealc and Pyramid C2

Mar 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://hunt.io/blog/russian-speaking-actors-impersonate-etf-distribute-stealc-pyramid-c2 Source: Hacker News Title: Exposing Russian EFF Impersonators: The Inside Story on Stealc and Pyramid C2 Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides an in-depth analysis of a cyber attack targeting the online gaming community, specifically through impersonation of the Electronic Frontier Foundation (EFF) to conduct phishing…

Tag: phishing campaigns