Cybercrime, phishing campaign via Bitcoin credit and smartphone prize
The email, arrived in Italy but probably written also in other languages, points to a fake site trying to steal credit card numbers. Here's how the scam works.
Cybercrime, Vidar campaign via fake SWIFT payment
The email xz attachment contains an exe, the malware itself. This is an info stealer, which targets passwords, credit cards and cryptocurrency wallets.
Cybercrime, Poulight is disguised as a txt file in a new phishing campaign
360 Total Security cybersecurity experts: The attackers spread the malware using RLO technology. It’s a trojan which steals info.
Cybercrime, phishing/smishing scams of fake COVID-19 vaccine surveys
The US DoJ: The bait is a gift for filling it out, but in reality the objective is just to steal personal and credit cards information.
Cybercrime, new phishing attack via fake purchase order
Victims, through an HTML attachment, are directed to a false tailored Adobe pdf online website to “view the file”. The goal is to steal credentials.
Cybercrime, fake Pfizer invoice carries a global Trickbot campaign
The xlsb mail attachment contacts a url and downloads the malware from an opendir, which also contains Ursnif/Gozi and is constantly updated.
Cybercrime, new global DHL themed phishing campaign
It’s tailored on the victim’s email. A link redirects to a fake company site, where user is asked to digit the password. Goal: to steal and harvest credentials.
Cybercrime, new phishing campaign exploits the email “storage limit” lure
Fake message from victim’s help desk invites him to open a link. It redirects to a false tailored login page. The objective is to steal the password.
Cybercrime, Morse Code last trick to hide malicious URLs in email attachments
Bleeping Computer cybersecurity experts: This phishing campaign is highly targeted, with logos for various companies to make it more convincing.
Cybercrime, phishing campaign via “Emails Suspended on Server Postmaster”
Fake webmail login page, pre-compiled with victim’s username, asks to digit the password to fix the problem. But it just steals credentials.