Experimental News Clipping Site

Tag: tactics

  • The Register: Fake CAPTCHA tests trick users into running malware

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/22/clickfix_report/ Source: The Register Title: Fake CAPTCHA tests trick users into running malware Feedly Summary: ClickFix tricks Microsoft’s security team has published an in-depth report into ClickFix, the social engineering attack which tricks users into executing malicious commands in the guise of proving their humanity.… AI Summary and Description: Yes Summary: Microsoft’s security…

  • Slashdot: Coinbase Reverses Remote-First Policy After North Korean Infiltration Attempts

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/08/22/1515238/coinbase-reverses-remote-first-policy-after-north-korean-infiltration-attempts?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Coinbase Reverses Remote-First Policy After North Korean Infiltration Attempts Feedly Summary: AI Summary and Description: Yes Summary: The text highlights the increasing security vulnerabilities associated with remote work policies, particularly in sensitive roles within cryptocurrency firms. It emphasizes the proactive measures taken by Coinbase to mitigate these risks, including…

  • Microsoft Security Blog: Think before you Click(Fix): Analyzing the ClickFix social engineering technique

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/21/think-before-you-clickfix-analyzing-the-clickfix-social-engineering-technique/ Source: Microsoft Security Blog Title: Think before you Click(Fix): Analyzing the ClickFix social engineering technique Feedly Summary: The ClickFix social engineering technique has been growing in popularity, with campaigns targeting thousands of enterprise and end-user devices daily. This technique exploits users’ tendency to resolve technical issues by tricking them into running malicious…

  • Unit 42: Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/attackers-sell-your-bandwidth-using-sdks/ Source: Unit 42 Title: Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth Feedly Summary: A campaign leverages CVE-2024-36401 to stealthily monetize victims’ bandwidth where legitimate software development kits (SDKs) are deployed for passive income. The post Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth…

  • The Register: ‘Limited’ data leak at Aussie telco turns out to be 280K customer details

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/20/tpg_telecom_iinet_breach/ Source: The Register Title: ‘Limited’ data leak at Aussie telco turns out to be 280K customer details Feedly Summary: iiNet breach blamed on single stolen login, with emails, phone numbers, and addresses exposed Aussie telco giant TPG Telecom has opened an investigation after confirming a cyberattack at subsidiary iiNet.… AI Summary and…

  • Cisco Talos Blog: Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/static-tundra/ Source: Cisco Talos Blog Title: Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices Feedly Summary: A Russian state-sponsored group, Static Tundra, is exploiting an old Cisco IOS vulnerability to compromise unpatched network devices worldwide, targeting key sectors for intelligence gathering. AI Summary and Description: Yes Summary: The text provides…

  • Cisco Talos Blog: Ransomware incidents in Japan during the first half of 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/ransomware_incidents_in_japan_during_the_first_half_of_2025/ Source: Cisco Talos Blog Title: Ransomware incidents in Japan during the first half of 2025 Feedly Summary: Ransomware attackers continue to primarily target small and medium-sized manufacturing businesses in Japan. AI Summary and Description: Yes Summary: The text provides an in-depth analysis of the rise in ransomware attacks in Japan during the…

  • Unit 42: Fashionable Phishing Bait: GenAI on the Hook

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/genai-phishing-bait/ Source: Unit 42 Title: Fashionable Phishing Bait: GenAI on the Hook Feedly Summary: GenAI-created phishing campaigns misuse tools ranging from website builders to text generators in order to create more convincing and scalable attacks. The post Fashionable Phishing Bait: GenAI on the Hook appeared first on Unit 42. AI Summary and Description:…

  • The Register: Typhoon-adjacent Chinese crew broke into Taiwanese web host

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/15/typhoonadjacent_chinese_crew_taiwan_web_servers/ Source: The Register Title: Typhoon-adjacent Chinese crew broke into Taiwanese web host Feedly Summary: Is that a JuicyPotato on your network? A suspected Chinese-government-backed cyber crew recently broke into a Taiwanese web hosting provider to steal credentials and plant backdoors for long-term access, using a mix of open-source and custom software tools,…