phishing

Microsoft, Apple and Google top the list of the most spoofed brands in 2021

4 min read

Cybersecurity News

Microsoft, Apple and Google top the list of the most spoofed brands in 2021

RiSec.n0tst3 23 February 2022

IBM’s 2022 X-Force Threat Intelligence Index also revealed that ransomware was again the top attack type last year and that manufacturing supply chains were most vulnerable to exploitation Microsoft, Apple and Google were the top three brands criminals attempted to mimic in 2021, according to IBM’s newly released X-Force Threat Intelligence Index. The industry-leading brands were used repeatedly in phishing kits, with attackers likely seeking to capitalize on their popularity and consumers’ trust, the Index said. Cybercriminals used the brands as a disguise to steal consumers’ information or infect their...

Microsoft Warns of ‘Ice Phishing’ Threat on Web3 and Decentralized Networks

3 min read

Cybersecurity News

Microsoft Warns of ‘Ice Phishing’ Threat on Web3 and Decentralized Networks

RiSec.n0tst3 19 February 2022

ICE PHISHING: Microsoft has warned of emerging threats in the Web3 landscape, including “ice phishing” campaigns, as a surge in adoption of blockchain and DeFi technologies emphasizes the need to build security into the decentralized web while it’s still in its early stages. The company’s Microsoft 365 Defender Research Team called out various new avenues through which malicious actors may attempt to trick cryptocurrency users into giving up their private cryptographic keys and carry out unauthorized fund transfers. One aspect that the immutable and public blockchain enables is complete transparency, so...

Analyzing Phishing Attacks that use malicious PDFs

2 min read

Analyzing Phishing Attacks that use malicious PDFs

RiSec.n0tst3 13 February 2022

Analyzing Phishing attacks Every day everybody receives many phishing attacks with malicious docs or PDFs. I decided to take a look at one of these files. I did a static analysis and I went straight to the point to make this reading simple and fast. Here is the received email as it was from the Caixa Economica Federal bank, but we can see the sender uses Gmail services and a strange name. I verified this e-mail header using MXtoolbox, and we can see the IP used by the sender (attacker). Below...

City of Tenino loses $280,309 to phishing email scam, state Auditor’s Office says

2 min read

City of Tenino loses $280,309 to phishing email scam, state Auditor’s Office says

RiSec.n0tst3 17 January 2022

The city of Tenino fell victim to a fraudulent scheme that cost it $280,309 in public funds, according to the Washington State Auditor’s Office. Former Clerk-Treasurer John Millard initiated 20 automated clearing house payments from the city’s bank account to multiple out-of-state bank accounts from March 19 to May 4, 2020, per a report. A series of phishing emails prompted the payments, many of which he did not get city council approval for. The email was sent to multiple public employees in Washington state who were members of the Washington...

What is identity theft? and 5+ Ways to prevent it

5 min read

Trending

What is identity theft? and 5+ Ways to prevent it

RiSec.n0tst3 15 November 2020

Identity theft has taken on a whole new life in the digital age and our data has become a valuable commodity that can be monetised and used to commit fraudulent activities. Data breaches are happening on an almost daily basis and Identity theft is the main driver behind all attacks, accounting for 65% of breaches and over 3.9 billion of the compromised data records this year. It’s become a big business that’s costing the global economy an estimated £3.2 trillion a year and according to recent research from Cifas, the number of identity theft victims...