Phishing campaigns thrive as evasive tactics outsmart conventional detection

A 25% increase in the use of phishing kits has been recorded in 2022, according to Group-IB. The key phishing trends observed are the increasing use of access control and advanced detection evasion techniques. The rise in evasive tactics, such as antib… Continue reading Phishing campaigns thrive as evasive tactics outsmart conventional detection

Chinese Hackers Keep Targeting Group-IB Cybersecurity Firm

By Deeba Ahmed
An APT group known as Tonto Team has tried targeting the Singapore-based Group-IB cybersecurity firm for the second time.
This is a post from HackRead.com Read the original post: Chinese Hackers Keep Targeting Group-IB Cybersecurity Firm
Continue reading Chinese Hackers Keep Targeting Group-IB Cybersecurity Firm

U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group

Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating “Trickbot,” a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016. The U.S. Department of the Treasury says the Trickbot group is associated with Russian intelligence services, and that this alliance led to the targeting of many U.S. companies and government entities. Continue reading U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group

Dark Pink, a newly discovered hacking campaign, threatens Southeast Asian military, government organizations

The unattributed activity employs a sophisticated approach to steal data and monitor targets, researchers say.

The post Dark Pink, a newly discovered hacking campaign, threatens Southeast Asian military, government organizations appeared first on CyberScoop.

Continue reading Dark Pink, a newly discovered hacking campaign, threatens Southeast Asian military, government organizations

Researchers uncover more than 167,000 stolen credit card numbers, primarily from the U.S.

Using two malware variants, unknown operators managed to compile stolen card data potentially worth more than $3 million, researchers said.

The post Researchers uncover more than 167,000 stolen credit card numbers, primarily from the U.S. appeared first on CyberScoop.

Continue reading Researchers uncover more than 167,000 stolen credit card numbers, primarily from the U.S.

Scams targeting crypto enthusiasts are becoming increasingly common

Group-IB has noted a fivefold increase in the number of domains used for crypto giveaway scams that involve fake YouTube streams in the first half of 2022. This Help Net Security video reveals how crypto giveaway scams have evolved into a profitable il… Continue reading Scams targeting crypto enthusiasts are becoming increasingly common

Crypto giveaway scams continue to escalate

Group-IB has noted a fivefold increase in the number of domains used for crypto giveaway scams that involve fake YouTube streams in the first half of 2022. In addition to Vitalik Buterin, Elon Musk, and other crypto celebs, scammers started exploiting … Continue reading Crypto giveaway scams continue to escalate

How 1-Time Passcodes Became a Corporate Liability

Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world’s largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices. Continue reading How 1-Time Passcodes Became a Corporate Liability

0ktapus: Twilio, Cloudflare phishers targeted 130+ organizations

Group-IB has discovered that the recently disclosed phishing attacks on the employees of Twilio and Cloudflare were part of the massive phishing campaign that resulted in 9,931 accounts of over 130 organizations being compromised. The campaign was code… Continue reading 0ktapus: Twilio, Cloudflare phishers targeted 130+ organizations