Page 6 - Patrick Harr News Today

Revived levels of holiday spending have caught the eye of threat actors who exploit consumer behaviors and prey on the surge of online payments and digital activities during the holidays.

Lookout reported that 50% of the phishing attacks aimed at the mobile devices of federal, state and local government workers in 2021 sought to steal credentials — up from 30% a year ago.

Researchers reported on a social engineering scam targeting Instagram users with a copyright infringement notice that uses a WhatsApp redirector to steal credentials.

A new report analyzing billions of link-based URLs, attachments and natural language messages in email, mobile and browser channels over six months in 2022, finds more than 255 million phishing attacks -- a 61 percent increase compared to 2021.

Cisco Talos offers new intent-based approach that offers more detailed information to security teams on the type of business email scam.

One security researcher says the fact the Secureworks study found that threat actors are bypassing MFA may show that more organizations are deploying authentication technology.

The tactic is just one in a constantly expanding bag of tricks that attackers are using to get users to click on links and open malicious documents.

Scammers are focused on making money and dont miss any opportunities, especially when news is global.

Mitiga researchers spotted a business email compromise campaign leveraging inherent weaknesses in Microsoft 365 Multi-Factor Authentication, Authenticator, and Identity Protection.

Avanan researchers say hackers use the legitimacy of popular sites to send phishing emails with malicious invoices and then request payments.