Phishing

In a new phishing campaign, audio recordings purportedly shared via OneNote were used as a lure to lead email recipients to a fake Microsoft login page that steals user account credentials.

A report from Anti-Phishing Working Group reveals that 58% of all phishing websites now use the HTTPS protocol.

Phishing schemes and rogue mobile applications continued to be heavily used by cybercriminals to defraud users and organizations in the first quarter of 2019, according to new report.

Iframe found in checkout page of Magento-powered shopping websites steals customers’ debit and credit card information via phishing.

Cybercriminal group ScarCruft has recently developed Bluetooth device-harvesting malware that collects Bluetooth device information such as names, device addresses, device types, as well as connection and authentication information.

The sustained prevalence of brand impersonation in phishing attacks is further demonstrated in a new report which listed the most impersonated brands in the first quarter of 2019.

More than 1.5 million malicious and spam emails were sent from thousands of compromised Office 365 accounts in March 2019 alone, a new report reveals.

The source code of the notorious Carbanak backdoor, which was linked to several high-profile data breaches, was found on the VirusTotal platform. What does this mean to enterprises?

Trend Micro researchers uncovered a sextortion scheme targeting Italian-speaking users. The scheme is notable in that the hackers are now also using Bitcoin Cash as one of their preferred cryptocurrencies.