Collaborate Disseminate
DocuSign phishing scams surged by 98%, with hundreds of daily attacks impersonating US government agencies like HHS and… Continue reading US Government Agencies Impersonated in Aggressive DocuSign Phishing Scams
Researchers discovered GoIssue, a new phishing tool targeting GitHub users, designed to extract email addresses from public profiles and launch mass email attacks. Marketed on a cybercrime forum, GoIssue allows attackers to send bulk emails while keepi… Continue reading GoIssue phishing tool targets GitHub developer credentials
SlashNext researchers have discovered a new, sophisticated phishing tool GoIssue targeting GitHub developers. Learn about its capabilities, the… Continue reading New GitLoker-Linked GoIssue Tool Targets GitHub Users for Phishing
A vulnerability in Microsoft Bookings can expose your organization to serious security risks. Learn how attackers can exploit… Continue reading Microsoft Bookings Flaw Enables Account Hijacking and Impersonation
North Korean hackers are targeting crypto-related businesses with phishing emails and novel macOS-specific malware. The crypto-related phishing campaign Since July 2024, phishing emails seemingly containing helpful information on risks related to the r… Continue reading North Korean hackers employ new tactics to compromise crypto-related businesses
From an INTERPOL announcement yessterday: A global INTERPOL operation has taken down more than 22,000 malicious IP addresses or servers linked to cyber threats. Operation Synergia II (1 April – 31 August 2024) specifically targeted phishing, rans… Continue reading INTERPOL’s Operation Synergia II took down 22,000 malicious IP addresses
Unknown attackers are trying to trick Windows users into spinning up a custom Linux virtual machine (VM) with a pre-configured backdoor, Securonix researchers have discovered. The campaign The attack began with a phishing email, they believe, but they … Continue reading Beware of phishing emails delivering backdoored Linux VMs!
CRON#TRAP is a new phishing attack using emulated Linux environments to bypass security and establish persistent backdoors. Leveraging… Continue reading Hackers Deploy CRON#TRAP for Persistent Linux System Backdoors
Scammers are exploiting DocuSign’s APIs to send realistic fake invoices, primarily targeting security software like Norton. This phishing… Continue reading Scammers Use DocuSign API to Evade Spam Filters with Phishing Invoices
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We’ll also explore an array of cybercrime services aimed at phishers who target hotels that rely on the world’s most visited travel website. Continue reading Booking.com Phishers May Leave You With Reservations