phishing techniques – Page 2 – Experimental News Clipping Site

Unit 42: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis

Apr 16, 2025

—

by

Source URL: https://unit42.paloaltonetworks.com/phishing-campaign-with-complex-attack-chain/ Source: Unit 42 Title: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis Feedly Summary: Agent Tesla, Remcos RAT and XLoader delivered via a complex phishing campaign. Learn how attackers are using multi-stage delivery to hinder analysis. The post Cascading Shadows: An Attack Chain Approach to Avoid Detection and…

Microsoft Security Blog: Threat actors leverage tax season to deploy tax-themed phishing campaigns

Apr 3, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/04/03/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns/ Source: Microsoft Security Blog Title: Threat actors leverage tax season to deploy tax-themed phishing campaigns Feedly Summary: As Tax Day approaches in the United States on April 15, Microsoft has detected several tax-themed phishing campaigns employing various tactics. These campaigns use malicious hyperlinks and attachments to deliver credential phishing and malware including…

Cisco Talos Blog: Gamaredon campaign abuses LNK files to distribute Remcos backdoor

Mar 28, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/gamaredon-campaign-distribute-remcos/ Source: Cisco Talos Blog Title: Gamaredon campaign abuses LNK files to distribute Remcos backdoor Feedly Summary: Cisco Talos is actively tracking an ongoing campaign, targeting users in Ukraine with malicious LNK files which run a PowerShell downloader since at least November 2024. AI Summary and Description: Yes **Summary:** The text details a…

The Cloudflare Blog: How Cloudflare is using automation to tackle phishing head on

Mar 17, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.cloudflare.com/how-cloudflare-is-using-automation-to-tackle-phishing/ Source: The Cloudflare Blog Title: How Cloudflare is using automation to tackle phishing head on Feedly Summary: How Cloudflare is using threat intelligence and our Developer Platform products to automate phishing abuse reports. AI Summary and Description: Yes Summary: The provided text discusses the significant growth in phishing attacks and Cloudflare’s innovative…

The Register: Sidewinder goes nuclear, charts course for maritime mayhem in tactics shift

Mar 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/03/10/sidewinder_tactics_shift/ Source: The Register Title: Sidewinder goes nuclear, charts course for maritime mayhem in tactics shift Feedly Summary: Phishing and ancient vulns still do the trick for one of the most prolific groups around Researchers say the Sidewinder offensive cyber crew is starting to target maritime and nuclear organizations.… AI Summary and Description:…

Hacker News: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger

Feb 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger Source: Hacker News Title: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text highlights the recent surge in targeted phishing and exploitation activities against the Signal messaging application by Russian state-aligned threat actors, driven by geopolitical motivations amid the ongoing conflict in…

Cloud Blog: Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger

Feb 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger/ Source: Cloud Blog Title: Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger Feedly Summary: Written by: Dan Black Google Threat Intelligence Group (GTIG) has observed increasing efforts from several Russia state-aligned threat actors to compromise Signal Messenger accounts used by individuals of interest to Russia’s intelligence services. While this…

Hacker News: Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

Feb 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.volexity.com/blog/2025/02/13/multiple-russian-threat-actors-targeting-microsoft-device-code-authentication/ Source: Hacker News Title: Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses a series of spear-phishing campaigns carried out by Russian threat actors targeting Microsoft 365 accounts using Device Code Authentication. The attacks leverage social engineering tactics, exploiting political…

The Register: If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish

Feb 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/15/russia_spies_spoofing_teams/ Source: The Register Title: If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish Feedly Summary: Roses aren’t cheap, violets are dear, now all your access token are belong to Vladimir Digital thieves – quite possibly Kremlin-linked baddies – have been emailing out bogus…

Microsoft Security Blog: Storm-2372 conducts device code phishing campaign

Feb 14, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conducts-device-code-phishing-campaign/ Source: Microsoft Security Blog Title: Storm-2372 conducts device code phishing campaign Feedly Summary: Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign has been active since August 2024 with the actor creating lures…

Tag: phishing techniques