Collaborate Disseminate
Scammers are exploiting DocuSign’s APIs to send realistic fake invoices, primarily targeting security software like Norton. This phishing… Continue reading Scammers Use DocuSign API to Evade Spam Filters with Phishing Invoices
A malvertising campaign is exploiting Meta’s platform to spread SYS01 infostealer, targeting men 45+ via fake ads for… Continue reading Fake Meta Ads Hijacking Facebook Accounts to Spread SYS01 Infostealer
Threat actors continue to probe the payments ecosystem for vulnerabilities and were successful in conducting fraud schemes affecting multiple financial institutions, technologies, and processes, according to Visa. The resurgence of physical theft Scamm… Continue reading Fraudsters revive old tactics mixed with modern technology
Anti-bot services on the dark web allow phishers to bypass Google’s Red Page warnings, evading detection and making… Continue reading Dark Web Anti-Bot Services Let Phishers Bypass Google’s Red Page
The Wall Street Journal is reporting that the CEO of a still unnamed company has been indicted for creating a fake auditing company to falsify security certifications in order to win government business.
Continue reading Justice Department Indicts Tech CEO for Falsifying Security Certifications
North Korean hackers are infiltrating Western companies using fraudulent IT workers to steal sensitive data and extort ransom.… Continue reading Fake North Korean IT Workers Infiltrate Western Firms, Demand Ransom
Learn how data from call detail records can help you find fraud calls made by your phone system — and prevent them from happening again. Continue reading How to Use Call Detail Records to Detect Fraud
Learn how data from call detail records can help you find fraud calls made by your phone system — and prevent them from happening again. Continue reading How to Use Call Detail Records to Detect Fraud
Creating new accounts under fake identities provides attackers with a way to launder money or commit fraud. Continue reading Deepfakes Can Fool Facial Recognition on Crypto Exchanges
After retiring in 2014 from an uncharacteristically long tenure running the NSA (and US CyberCommand), Keith Alexander founded a cybersecurity company called IronNet. At the time, he claimed that it was based on IP he developed on his own time while still in the military. That always troubled me. Whatever ideas he had, they were developed on public time using public resources: he shouldn’t have been able to leave military service with them in his back pocket.
In any case, it was never clear what those ideas were. IronNet never seemed to have any special technology going for it. Near as I could tell, its success was entirely based on Alexander’s name…