phishing

Pierluigi Paganini July 21, 2014
Cybercrime exploits the crash of Malaysia Airlines Flight MH17

Security experts at TrendMicro have detected a spam campaign via Twitter which exploits the incident occurred to Malaysia Airlines Flight MH17. Unfortunately, tragedies like the one occurred to the Malaysia Airlines Flight MH17 or the recent escalation in Gaza are excellent occasions for cyber criminals that try to exploit the public attention to carry out illegal activities. […]

Pierluigi Paganini July 13, 2014
NightHunter extensive data theft campaign has been active since 2009

Experts from Cyphort Labs have discovered an extensive data theft campaign named Nighthunter that has been active since 2009 stealing victim’s credentials. Security experts at Cyphort firm have recently uncovered a five-year-old attack campaign dubbed NightHunter arranged to steal user credentials for Dropbox, Facebook, and other web services. The malicious campaign is cross sector, every industry […]

Pierluigi Paganini July 06, 2014
APWG report shows the increase of phishing activities in Q1 2014

The APWG Report on Phishing Activity Trends analyzes phishing attacks observed by its member companies and reported to the APWG group. According to the APWG Phishing Activity Trends Report for the first quarter of 2014, the phishing activities have increased in the first months of the year. According to the APWG report, the number of malicious websites used for the […]

Pierluigi Paganini June 27, 2014
Phishing goes mobile with cloned banking app into Google Play

Security experts at Lookout mobile security discovered a phishing campaign against an Israeli bank based which exploited a cloned mobile application. Cloned mobile applications are increasily used as an attack vector for by bad actors, malicious code could be used to steal information, as an essential part of an extortion scheme or for fraudulent activities such as dialing premium numbers. […]

Pierluigi Paganini June 17, 2014
Dyreza banking Trojan uses browser hooking to defeat SSL

Security experts at CSIS in Denmark have discovered a new piece of banking malware, dubbed Dyreza, which implements browser hooking to defeat SSL. Dyreza is the name of a new banking Trojan which is targeting numerous financial institutions, including Bank of America, Citibank, Natwest, RBS and Ulsterbank. Dyreza captured the attention of security researchers due the technique it […]

Pierluigi Paganini June 12, 2014
Gmail hacking, a mine of data for phishing and spam attacks

An Israeli researcher disclosed a Gmail vulnerability, fixed by Google, that exposes an indefinite number of Gmail addresses and business emails. Google company has fixed a critical vulnerability, disclosed by the Israeli researcher Oren Hafif,  that exposes an indefinite number of Gmail addresses. Technically the experts has discovered that it is possible to bruteforce a token […]

Pierluigi Paganini May 31, 2014
Symantec alerts on surge in Phishing for Apple ID

Symantec has released a security advisory on the increment of phishing activities for Apple ID login credentials. The Symantec security firm has published an interesting blog post to warn Apple Mobile users on the increment of phishing campaigns to steal Apple ID credentials. Cybercriminals are adopting new techniques to trick users into disclose their personal information […]

Pierluigi Paganini May 26, 2014
Twitter spam campaign ‘US Gov trying to shut down Bitcoin’

US Government was working on taking down Bitcoin, this is the theme of a new spam campaign via Twitter to spread malicious links. Security Experts at Malwarebytes have discovered a malicious scam spreading malicious links via Twitter. The cyber criminals behind the spam campaign are spreading malware through rogue tweets by a number of bogus Twitter accounts, they […]

Pierluigi Paganini May 24, 2014
Unrecom phishing campaign hit high-profile entities globally

Security Experts at Fidelis Cyber Security firm have recently discovered a new phishing campaign using the Unrecom RAT (remote access trojan). Fidelis Cyber Security firm has recently issued the Fidelis Threat Advisory #1013 to detail a phishing campaign using the Unrecom RAT (remote access trojan). Experts at Fidelis during the last two weeks have observed an increase […]

Pierluigi Paganini May 23, 2014
Sophisticated Google Drive Phishing Scam is becoming popular

Security experts at Symantec have discovered a new phishing scheme based on Google Drive that is being used by hackers to steal Google Account credentials Phishing scammers are exploring new technique to conduct illicit activities, in the recent weeks we have already discussed on the efficiency to use Google Docs and Google Drive  for phishing campaigns. Google Drive popularity […]