Researchers warn of new Rug Pull scam through fraudulent crypto tokens

By Deeba Ahmed Another day another Rug Pull scam that involves exploiting of smart contract vulnerability. Scammers are exploiting misconfigurations in… This is a post from HackRead.com Read the original post: Researchers warn of new Rug Pull scam through fraudulent crypto tokens...

Hackers Creating Fraudulent Crypto Tokens as Part of 'Rug Pull' Scams

Misconfigurations in smart contracts are being exploited by scammers to create malicious cryptocurrency tokens with the goal of stealing funds from unsuspecting users. The instances of token fraud in the wild include hiding 99% fee functions and concealing backdoor routines, researchers from Chec...

Phishers on the prowl with fake parking meter QR codes

QR codes come and go as a threat. The last time we wrote about them they were causing problems at gas stations, and by sheer chance this latest outing shares vehicular related subject matter. Law enforcement in the US is sounding the alarm regarding parking meters. A quick refresher QR Quick...

Google Voice Authentication Scam Leaves Victims on the Hook

Fluffy is missing. You post your lost pet’s photo online, hoping that some good Samaritan will find Fluffy, listing your phone number and crossing your fingers. You get a text or email from somebody who thinks they’ve found Fluffy – or, say, somebody who wants to buy that scruffy old couch you...

Open Redirect

shopware/shopware is vulnerable to open redirects. The vulnerability exists in onRouteStartup function of Bootstrap.php because the redirect parameter is not properly checked which allows a malicious attacker to launch phishing scam and steal credentials by redirecting to untrusted sites...

$10m of funds goes missing in what appears to be a cryptocurrency rug-pull

There’s a lot of concern in the cryptocurrency realm at the moment. A yield farming platform "utilizing arbitrage to gain optimal yield with low risk" has gone AWOL. Site down, Twitter account deleted, no word from the team behind it explaining what happened. Worst of all, some $10 million worth ...

Customer support scammers take aim at NFT enthusiasts

Adidas has been making waves in the NFT space with a collection of footwear/bored ape crossover sales. WEN? EARLY ACCESS MINTING STARTS NOW First look of the collaborative NFT with @gmoneyNFT @punkscomic and @BoredApeYC Good luck and TracksuitUp pic.twitter.com/REYOSdRbNT -- adidas Originals...

JFrog: Impersonation attack via Broken link in "blog-author" page

A social media platform link of "Twitter" on https://jfrog.com/blog-author/john-peterson/ was broken and could've allowed a user to impersonate a reseller and attack / scam your customers. This happened because the account of twitter either deleted or changed their username. I thought I'd report ...

Robocalls More Than Doubled in 2021, Cost Victims $30B

No surprise to anyone with a phone: Robocalls are rampant. In fact, the number of scam calls more than doubled over the past year, successfully bilking wireless phone customers out of $29.8 billion in 2021 alone. Wireless carrier T-Mobile just released its Scam and Robocall year-end report, and t...

Indian PM Modi’s Twitter Account HACKED for Bitcoin scam

By Deeba Ahmed This was the second time that a Twitter account linked to PM Modi got compromised for a Bitcoin-related scam. This is a post from HackRead.com Read the original post: Indian PM Modis Twitter Account HACKED for Bitcoin scam...

‘Appalling’ Riot Games Job Fraud Takes Aim at Wallets

Riot Games, the developer behind League of Legends, has filed a California lawsuit against scammers, whose identities aren’t yet known, for ripping off job seekers with the promise of a gig with the company. Usually early in their careers and eager for a chance with a gaming company like Riot, jo...

Publisher can scam users by changing license fees and using auction to freeze user funds

Handle 0x0x0x Vulnerability details Publisher can call changeLicenseFee to change fees. There is no maximum cap for this parameter. At first glance, because there is a timelock period of 1 day, the users have enough time to react. But if the publisher can start an auction and bondForRebalance. Th...

Fake job interviews plague major game developers like Riot Games and Rockstar

If you’re job hunting at the moment, be on your guard. The pandemic is still around. Lots of people are in need of employment. Scammers are all too happy to string folks along with bogus employment offers, as is the case here. How have they managed to snare prospective job hunters? Riding on the...

“Get Your Free Omicron PCR test” is the latest Omicron phishing scam

By Deeba Ahmed The latest Omicron phishing scam is currently targeting unsuspecting users in the United Kingdom. This is a post from HackRead.com Read the original post: “Get Your Free Omicron PCR test” is the latest Omicron phishing scam...

Omicron Phishing Scam Already Spotted in UK

The global pandemic has provided cover for all sorts of phishing scams over the past couple of years, and the rise in alarm over the spread of the latest COVID-19 variant, Omicron, is no exception. As public health professionals across the globe grapple with what they fear could be an even more...

‘Double-Extortion’ Ransomware Damage Skyrockets 935%

The ransomware business is booming, and feeble corporate security and a flourishing ransomware-as-a-service RaaS affiliate market are to blame, researchers say. Access to compromised networks is cheap, thanks to a rise in the number of initial-access brokers and RaaS tools can turn everyday petty...

Open Redirect

showdoc/showdoc is vulnerable to open redirects. The vulnerability exists in onSubmit function of Login.vue because the redirect parameter is not properly checked which allows a malicious attacker to launch phishing scam and steal credentials by redirecting to untrusted sites...

Microsoft MSHTML flaw exploited in Gmail and Instagram phishing scam

By Deeba Ahmed The attacks started in July 2021 in which threat actors exploited Microsoft MSHTML vulnerability to target overseas Iranians. This is a post from HackRead.com Read the original post: Microsoft MSHTML flaw exploited in Gmail and Instagram phishing scam...

Talos Takes Ep. #78: Attackers would love to buy you a non-existent PS5 this holiday season

By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit the Talos Takes page. We know this episode comes around every year, but people keep falling for scams, so we have to remind people how to... Thi...

Ransom Your Employer Email Scam Suspect Arrested

By Deeba Ahmed The scam involved attempts to hire insiders to install DemonWare ransomware on their employer's IT systems. This is a post from HackRead.com Read the original post: Ransom Your Employer Email Scam Suspect Arrested...