Remove Insurance Remove Manufacturing Remove Phishing
article thumbnail

Phishing campaign targeted US executives exploiting a flaw in Indeed job search platform

Security Affairs

Threat actors exploited an open redirection vulnerability in the job search platform Indeed to carry out phishing attacks. Researchers from the cybersecurity firm Menlo Security reported that threat actors exploited an open redirection vulnerability in the job search platform Indeed in phishing attacks. ” continues the report.

Phishing 342
article thumbnail

A massive phishing campaign using QR codes targets the energy sector

Security Affairs

A phishing campaign employing QR codes targeted a leading energy company in the US, cybersecurity firm Cofense reported. “Beginning in May 2023, Cofense has observed a large phishing campaign utilizing QR codes targeting the Microsoft credentials of users from a wide array of industries.” com (Cloudflare’s Web3 services).

Phishing 246
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

As of May 2024, Black Basta ransomware affiliates hacked over 500 organizations worldwide

Security Affairs

In December 2023, Elliptic and Corvus Insurance published a joint research that revealed the group accumulated at least $107 million in Bitcoin ransom payments since early 2022. Most of the victims are in the manufacturing, engineering and construction, and retail sectors. ” reads the CSA. The average ransom payment was $1.2

article thumbnail

Senior Executives Beware: The Rise of EvilProxy Phishing Campaigns

KnowBe4

Menlo Security warns that a social engineering campaign is using the EvilProxy phishing kit to target senior executives across a range of industries, including banking and financial services, insurance, property management and real estate, and manufacturing.

Phishing 119
article thumbnail

US CISA and FBI publish joint alert on DarkSide ransomware

Security Affairs

. “According to open-source reporting, DarkSide actors have previously been observed gaining initial access through phishing and exploiting remotely accessible accounts and systems and Virtual Desktop Infrastructure (VDI) (Phishing [ T1566] , Exploit Public-Facing Application [ T1190 ], External Remote Services [ T1133 ]).[

article thumbnail

State-Sponsored Phishing Campaigns Target 40,000 VIP Individuals

KnowBe4

Researchers at Menlo Security discovered three state-sponsored phishing campaigns that have targeted 40,000 important individuals over the past three months. “In The breadth and depth of these breaches signal an alarming escalation in cyber warfare.” LegalQloud targets investment banks as a second focus.”

Phishing 114
article thumbnail

Nice Suzuki, sport: shame dealer left your data up for grabs

Security Affairs

Suzuki or otherwise, buying a new vehicle is an intense experience with complicated credit, insurance, documentation, and contracts. Rarely do car manufacturers sell their cars directly. Databases and credentials exposed Suzuki Motor Corporation is the tenth largest car manufacturer worldwide, with a net worth of $17.6