Hacker News with Generative AI: Phishing

Windows infected with backdoored Linux VMs in new phishing attacks (bleepingcomputer.com)
A new phishing campaign dubbed 'CRON#TRAP' infects Windows with a Linux virtual machine that contains a built-in backdoor to give stealthy access to corporate networks.

Cybersecurity, Phishing, Linux, Virtual Machines, Backdoors

15 points by sandwichsphinx 16 days ago | 0 comments

Russian spies use remote desktop protocol files in unusual mass phishing drive (theregister.com)
Microsoft says a mass phishing campaign by Russia's foreign intelligence services (SVR) is now in its second week, and the spies are using a novel info-gathering technique.

Cybersecurity, Phishing, Russia, Foreign Intelligence, Microsoft

5 points by LinuxBender 21 days ago | 0 comments

Microsoft creates fake Azure tenants to pull phishers into honeypots (bleepingcomputer.com)
Microsoft is using deceptive tactics against phishing actors by spawning realistic-looking honeypot tenants with access to Azure and lure cybercriminals in to collect intelligence about them.

Cybersecurity, Microsoft, Phishing, Honeypots

6 points by mooreds 27 days ago | 0 comments

Microsoft creates fake Azure tenants to pull phishers into honeypots (bleepingcomputer.com)
Microsoft is using deceptive tactics against phishing actors by spawning realistic-looking honeypot tenants with access to Azure and lure cybercriminals in to collect intelligence about them.

Cybersecurity, Microsoft, Phishing, Honeypots

11 points by sandwichsphinx 33 days ago | 0 comments

DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks (theregister.com)
The US Department of Justice and Microsoft have seized 107 websites used by Russian cyberspies in a phishing campaign to steal sensitive information from US government agencies, think tanks, and other victims.

Cybersecurity, Government, Russia, Phishing, Microsoft

4 points by LinuxBender 49 days ago | 0 comments

Windows PowerShell Phish Has Scary Potential (krebsonsecurity.com)
Many GitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. While it’s unlikely that many programmers fell for this scam, it’s notable because less targeted versions of it are likely to be far more successful against the average Windows user.

Cybersecurity, Phishing, Malware, Windows, Programming

21 points by todsacerdoti 63 days ago | 13 comments

Using Security Engineering to Prevent Phishing – Doyensec (doyensec.com)
Recently Doyensec was hired by a client offering a “Communication Platform as a Service”. This platform allows their clients to craft a customer service experience and to communicate with their own customers via a plethora of channels: email, web chats, social media and more.

Security Engineering, Phishing, Customer Service, Communication Platforms

3 points by tony-ds 63 days ago | 1 comments

FBI recommends using an ad blocker (2022) (ic3.gov)
The FBI is warning the public that cyber criminals are using search engine advertisement services to impersonate brands and direct users to malicious sites that host ransomware and steal login credentials and other financial information.

Cybersecurity, Government Recommendations, Phishing, Malware

297 points by ysabri 74 days ago | 223 comments

Hacker trap: Fake OnlyFans tool backstabs cybercriminals, steals passwords (bleepingcomputer.com)

Cybersecurity, Phishing, Malware, Hacking

72 points by nazgulsenpai 77 days ago | 30 comments

When Get-Out-the-Vote Efforts Look Like Phishing (krebsonsecurity.com)

Politics, Cybersecurity, Phishing

11 points by todsacerdoti 85 days ago | 0 comments

New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Creds (securityweek.com)

Security, Mobile Security, Phishing, Cybersecurity, Data Breaches

52 points by LinuxBender 92 days ago | 18 comments

Apple Intelligence beta flagged a phishing email as "Priority" (panic.com)