They’ve been warning about fake courier scams on Naked Security for many years, even before the coronavirus pandemic increased our collective reliance on home deliveries. These scams can take many different forms, including: A fake gift sent by an online…
A targeted phishing campaign aimed at the aviation industry for two years may be spearheaded by a threat actor operating out of Nigeria, highlighting how attackers can carry out small-scale cyber offensives for extended periods of time while staying under…
Researchers at Unit 42 have previously reported on how cybercriminals have preyed on consumers during COVID-19 using COVID-19 themed phishing attacks impersonating brands like Pfizer and BioNTech and the use of similar lures concerning protective supplies. Researchers have now observed…
Vendor Email Compromise requires first taking control of a strategic email account within the victim organizations. According to new data, cybercriminals are getting really good at this. Vendor Email Compromise – an attack where an email account is actually taken…
Business Email Compromise is a multi-billion dollar business, representing 43% of all cybercrime last year. Despite it being dwarfed in the news by ransomware, it represents a growing threat. We’ve seen recent rises in BEC activity – along with a…
The use of open redirects from legitimate domains makes phishing emails that much more believable and credible, obfuscating the dangerous nature of these attacks. In the ongoing saga of attacks on Microsoft 365 users, security analysts at Microsoft recently announced…
