Latest Social Engineering news

FTC offers $25,000 prize for detecting AI-enabled voice cloning

The U.S. Federal Trade Commission (FTC) has started accepting submissions for its Voice Cloning Challenge, a public competition with a $25,000 top prize for ideas that protect consumers from the danger of AI-enabled voice cloning for fraudulent activity.
- Bill Toulas
- January 04, 2024
- 09:30 AM
- 2
BazarCall attacks abuse Google Forms to legitimize phishing emails

A new wave of BazarCall attacks uses Google Forms to generate and send payment receipts to victims, attempting to make the phishing attempt appear more legitimate.
- Bill Toulas
- December 13, 2023
- 03:34 PM
- 1
Sponsored Content
Holiday Hackers: How to Safeguard Your Service Desk

Consumer traffic rises sharply during the holidays, as do the scope and severity of cyberattacks. Learn more from Specops Software on how to protect your service or help desk from social engineering attacks during the holiday season.
- Sponsored by Specops Software
- December 05, 2023
- 10:02 AM
- 0
FBI shares tactics of notorious Scattered Spider hacker collective

The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency released an advisory about the evasive threat actor tracked as Scattered Spider, a loosely knit hacking collective that now collaborates with the ALPHV/BlackCat Russian ransomware operation..
- Bill Toulas
- November 16, 2023
- 04:55 PM
- 0
Microsoft: Octo Tempest is one of the most dangerous financial hacking groups

Microsoft has published a detailed profile of a native English-speaking threat actor with advanced social engineering capabilities it tracks as Octo Tempest, that targets companies in data extortion and ransomware attacks.
- Ionut Ilascu
- October 26, 2023
- 06:55 PM
- 0
Shadow PC warns of data breach as hacker tries to sell gamers' info

Shadow PC, a provider of high-end cloud computing services, is warning customers of a data breach that exposed customers' private information, as a threat actor claims to be selling the stolen data for over 500,000 customers.
- Bill Toulas
- October 12, 2023
- 08:13 AM
- 0
Retool blames breach on Google Authenticator MFA cloud sync feature

Software company Retool says the accounts of 27 cloud customers were compromised following a targeted and multi-stage social engineering attack.
- Sergiu Gatlan
- September 15, 2023
- 03:15 PM
- 3
Okta: Hackers target IT help desks to gain Super Admin, disable MFA

Identity and access management company Okta released a warning about social engineering attacks targeting IT service desk agents at U.S.-based customers in an attempt to trick them into resetting multi-factor authentication (MFA) for high-privileged users.
- Bill Toulas
- September 04, 2023
- 11:29 AM
- 0
Lapsus$ teen hackers convicted of high-profile cyberattacks

A London jury has found that an 18-year-old member of the Lapsus$ data extortion gang helped hack multiple high-profile companies, stole data from them, and demanded a ransom threatening to leak the information.
- Ionut Ilascu
- August 23, 2023
- 06:17 PM
- 3
Lapsus$ hackers took SIM-swapping attacks to the next level

The U.S. government released a report after analyzing simple techniques, e.g. SIM swapping, used by the Lapsus$ extortion group to breach dozens of organizations with a strong security posture.
- Ionut Ilascu
- August 11, 2023
- 02:23 AM
- 1
NSA and FBI: Kimsuky hackers pose as journalists to steal intel

State-sponsored North Korean hacker group Kimsuky (a.ka. APT43) has been impersonating journalists and academics for spear-phishing campaigns to collect intelligence from think tanks, research centers, academic institutions, and various media organizations.
- Bill Toulas
- June 02, 2023
- 02:07 PM
- 1
Coinbase cyberattack targeted employees with fake SMS alert

Coinbase cryptocurrency exchange platform has disclosed that an unknown threat actor stole the login credentials of one of its employees in an attempt to gain remote access to the company's systems.
- Bill Toulas
- February 20, 2023
- 07:52 AM
- 2
Hackers use new IceBreaker malware to breach gaming companies

Hackers have been targeting online gaming and gambling companies with what appears to be a previously unseen backdoor that researchers have named IceBreaker.
- Bill Toulas
- February 01, 2023
- 09:45 AM
- 0
Hackers auction alleged source code for League of Legends

Threat actors are auctioning the alleged source code for Riot Game's League of Legends and the Packman anti-cheat software, confirmed to be stolen in a recent hack of the game company's developer environment.
- Lawrence Abrams
- January 25, 2023
- 02:34 PM
- 1
FanDuel warns of data breach after customer info stolen in vendor hack

The FanDuel sportsbook and betting site is warning customers that their names and email addresses were exposed in a January 2023 MailChimp security breach, urging users to remain vigilant against phishing emails.
- Lawrence Abrams
- January 22, 2023
- 01:56 PM
- 0
Riot Games hacked, delays game patches after security breach

Riot Games, the video game developer and publisher behind League of Legends and Valorant, says it will delay game patches after its development environment was compromised.
- Sergiu Gatlan
- January 21, 2023
- 02:54 PM
- 3
MailChimp discloses new breach after employees got hacked

Email marketing firm MailChimp suffered another breach after hackers accessed an internal customer support and account administration tool, allowing the threat actors to access the data of 133 customers.
- Lawrence Abrams
- January 18, 2023
- 04:11 PM
- 0
Sneaky hackers reverse defense mitigations when detected

A financially motivated threat actor is hacking telecommunication service providers and business process outsourcing firms, actively reversing defensive mitigations applied when the breach is detected.
- Bill Toulas
- December 05, 2022
- 03:08 PM
- 0
Sponsored Content
MFA Fatigue attacks are putting your organization at risk

A common threat targeting businesses is MFA fatigue attacks—a technique where a cybercriminal attempts to gain access to a corporate network by bombarding a user with MFA prompts. This article includes some measures you can implement to prevent these types of attacks.
- Sponsored by Specops Software
- November 15, 2022
- 10:07 AM
- 1
LinkedIn's new security features combat fake profiles, threat actors

LinkedIn has introduced three new features to fight fake profiles and malicious use of the platform, including a new method to confirm whether a profile is authentic by showing whether it has a verified work email or phone number.
- Bill Toulas
- October 26, 2022
- 02:40 PM
- 2