Nearly One-Quarter of Financial-Themed Spam Emails are Phishing Attacks
While spam tends to be dismissed as being more an annoyance, new research shows that there is a very real and ever-present threat in emails that are marked as “spam”.
phishing
New Adversary in the Middle Platform Circumvents MFA Protections “At Scale”
As Phishing as a Service (PhaaS) kits continue to evolve, news like recent attacks using the Greatness toolkit demonstrate how easy it is for novice attackers to access accounts despite multi-factor authentication (MFA) being enabled.
How Ducktail capitalizes on compromised business, ad accounts
Quite some money can be made from selling compromised business and ad accounts on social media platforms, and the Ducktail threat actor has specialized in just that. “We observed that an account deemed ‘low-grade’ sells for around 350…
Labor Day Alert: Mobile Phishing Attacks on the Rise for Remote Employees
A recent survey by Lookout, Inc. warns for a specific attack vector as Labor Day approaches. The study shows that 85% of enterprise employees capable of remote work plan to do so on Friday, September 1, primarily using mobile devices.
[Live Demo] Ridiculously Easy Security Awareness Training and Phishing
Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.
Customers of Cryptocurrency FTX are Target of Phishing Emails
Customers of the bankrupt cryptocurrency exchange FTX are already receiving phishing emails following a breach of personal data held by several crypto companies, CoinDesk reports.
To Fix DMARC Requires Angry Customers
Spoofing emails escape email authentication checks because blocking imposters takes effort. Customers must demand enforcement from their vendors.
The post To Fix DMARC Requires Angry Customers appeared first on eSecurity Planet.
Open Redirect Flaws: The Newest Phishing Trick
No surprise: phishing attacks are on the rise, and a new technique is becoming increasingly popular: open redirect flaws. These flaws allow attackers to redirect victims to malicious websites, even if the link in the phishing email appears to …
Quishing: QR Codes as Phishbait
Researchers at Trustwave are tracking an increase in the use of QR codes to spread phishing links.
Abnormal Security: Microsoft Tops List of Most-Impersonated Brands in Phishing Exploits
A new study found that 4.31% of phishing attacks mimicked Microsoft, far ahead of the second most-spoofed brand PayPal.