Collaborate Disseminate
The FBI and the US Cybersecurity and Infrastructure Security Agency (CISA) have issued a joint warning to help Americans spot spoofed election-related domains and email accounts that subject them to the risks of cybercrime and disinformation. The alert… Continue reading FBI and CISA Warn of Spoofed Website Domains and Emails Exploiting the 2020 Election
A pair of recent campaigns aim to lift credentials and other personal information under the guise of Amazon package-delivery notices. Continue reading Amazon-Themed Phishing Campaigns Swim Past Security Checks
An effective spoofing campaign promises users important information about new coronavirus cases in their local area, scooting past Proofpoint and Microsoft Office 356 ATPs. Continue reading Top Email Protections Fail in Latest COVID-19 Phishing Campaign
Red Kite said that domain-spoofing and convincing scam emails claiming to be from suppliers were the cause. Continue reading Community Housing Nonprofit Hit with $1.2M Loss in BEC Scam
How Sergey Denisoff described his early ad-buying ventures: buying BS popup traffic and reselling it to buyers demanding BS traffic. Continue reading 9th Methbot suspect arrested in massive clickfraud ring
Business email compromise group London Blue is back with evolved email domain spoofing tactics and a newfound interest in targets in Asia. Continue reading BEC Scam Gang London Blue Evolves Tactics, Targets
Researchers have seen March Madness-related phishing scams, fake domains and adware spike as cybercriminals take a pass at tournament viewers. Continue reading March Madness Scams Give Attackers Fast Break
Be on your guard if your company has received an order which appears to come from a UK university email address. That’s the advice of Action Fraud, the UK’s national reporting service for fraud and financially-motivated cybercrime, after it… Continue reading UK university domains spoofed in massive fraud campaign targeting suppliers
A glitch in Auth0 could allow attackers to spoof a legitimate website and collect sensitive information from visitors. Continue reading Auth0 Glitch Allows Attackers to Launch Phishing Attacks