Tag Archives: Social engineering
WindRelay Android Malware Relays Live NFC Payment Card Data via Vishing Scam
Discover how the new WindRelay Android malware combines vishing scams with NFC relaying to steal contactless payment card data in real time. Continue reading
Lazarus Group Exploits Windows Zero-Day in Operation Dream Job Campaign
Discover how the Lazarus Group targets defense sectors using social engineering and a Windows zero-day vulnerability in the Operation Dream Job campaign. Continue reading
UNC6671 Vishing Campaign Targets Major Wall Street Financial Firms
Google Threat Intelligence uncovers a massive UNC6671 vishing campaign targeting Wall Street financial firms using advanced help desk social engineering. Continue reading
SMOKE SCREEN Campaign Uses Fake Software Updates to Deploy ScreenConnect
Discover how the new SMOKE SCREEN campaign uses fake Adobe and Zoom updates to deploy ScreenConnect for persistent remote access. Continue reading
DOUBLECUP ClickFix Service Hides Malware in Cached Browser Images
Discover how the new DOUBLECUP ClickFix Service bypasses security by hiding advanced malware payloads inside cached browser images. Continue reading
Chaos Ransomware Delivered via Microsoft Teams Vishing Campaign
A Sophos threat alert reveals that the STAC4749 threat group is using Microsoft Teams vishing to distribute Chaos ransomware and exfiltrate data. Continue reading
Abbott Laboratories Breach: ShinyHunters Extortion and Investigation
Healthcare giant Abbott Laboratories is investigating a major Abbott Laboratories breach involving ShinyHunters and a separate LabCentral portal security incident. Continue reading
ClickLock macOS Stealer: New Malware Uses Extortion and Kill Loops
Discover how the new ClickLock macOS Stealer uses ClickFix lures and disruptive kill loops to compromise systems and extort user credentials worldwide. Continue reading
Starland RAT Malware: Russian Hackers Exploit Trojanized Installers
Discover how Russian hackers are distributing the novel Starland RAT through trojanized Zoom and Webex installers in a sophisticated cyber campaign. Continue reading