phishing techniques – Experimental News Clipping Site

Krebs on Security: Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme

Aug 15, 2025

—

by

Source URL: https://krebsonsecurity.com/2025/08/mobile-phishers-target-brokerage-accounts-in-ramp-and-dump-cashout-scheme/ Source: Krebs on Security Title: Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme Feedly Summary: Cybercriminal groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage services, new research shows. Undeterred by security controls at these…

Unit 42: The Ηоmоgraph Illusion: Not Everything Is As It Seems

Jul 25, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/homograph-attacks/ Source: Unit 42 Title: The Ηоmоgraph Illusion: Not Everything Is As It Seems Feedly Summary: A subtle yet dangerous email attack vector: homograph attacks. Threat actors are using visually similar, non-Latin characters to bypass security filters. The post The Ηоmоgraph Illusion: Not Everything Is As It Seems appeared first on Unit 42.…

The Register: Phishing platforms, infostealers blamed as identity attacks soar

Jul 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/07/07/phishing_platforms_infostealers_blamed_for/ Source: The Register Title: Phishing platforms, infostealers blamed as identity attacks soar Feedly Summary: Get your creds in order or risk BEC, ransomware attacks, orgs warned A rise in advanced phishing kits and info-stealing malware are to blame for a 156 percent jump in cyberattacks targeting user logins, say researchers.… AI Summary…

The Register: Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware

Jun 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/06/19/sneaky_serpentinecloud_slithers_through_cloudflare/ Source: The Register Title: Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware Feedly Summary: Phishing, Python and RATs, oh my A sneaky malware campaign slithers through Cloudflare tunnel subdomains to execute in-memory malicious code and give unknown attackers long-term access to pwned machines.… AI Summary and Description: Yes…

Cloud Blog: What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia

Jun 18, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/creative-phishing-academics-critics-of-russia/ Source: Cloud Blog Title: What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia Feedly Summary: Written by: Gabby Roncone, Wesley Shields In cooperation with external partners, Google Threat Intelligence Group (GTIG) observed a Russia state-sponsored cyber threat actor impersonating the U.S. Department of State. From at least…

Microsoft Security Blog: Defending against evolving identity attack techniques

May 29, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/05/29/defending-against-evolving-identity-attack-techniques/ Source: Microsoft Security Blog Title: Defending against evolving identity attack techniques Feedly Summary: Threat actors continue to develop and leverage various techniques that aim to compromise cloud identities. Despite advancements in protections like multifactor authentication (MFA) and passwordless solutions, social engineering remains a key aspect of phishing attacks. Implementing phishing-resistant solutions, like…

Microsoft Security Blog: New Russia-affiliated actor Void Blizzard targets critical sectors for espionage

May 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/05/27/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage/ Source: Microsoft Security Blog Title: New Russia-affiliated actor Void Blizzard targets critical sectors for espionage Feedly Summary: Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since…

Cisco Talos Blog: Year in Review: AI based threats

Apr 29, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/year-in-review-ai-based-threats/ Source: Cisco Talos Blog Title: Year in Review: AI based threats Feedly Summary: 2024 wasn’t the year that AI rewrote the cybercrime playbook — but it did turbocharge some of the old tricks. Read this summary of AI-based threats, from Talos’ 2024 Year in Review. AI Summary and Description: Yes Summary: The…

Unit 42: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis

Apr 16, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/phishing-campaign-with-complex-attack-chain/ Source: Unit 42 Title: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis Feedly Summary: Agent Tesla, Remcos RAT and XLoader delivered via a complex phishing campaign. Learn how attackers are using multi-stage delivery to hinder analysis. The post Cascading Shadows: An Attack Chain Approach to Avoid Detection and…

Microsoft Security Blog: Threat actors leverage tax season to deploy tax-themed phishing campaigns

Apr 3, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/04/03/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns/ Source: Microsoft Security Blog Title: Threat actors leverage tax season to deploy tax-themed phishing campaigns Feedly Summary: As Tax Day approaches in the United States on April 15, Microsoft has detected several tax-themed phishing campaigns employing various tactics. These campaigns use malicious hyperlinks and attachments to deliver credential phishing and malware including…

Tag: phishing techniques