A week in security (October 16 – October 22)

Last week was an eventful one in security, keeping our research and intel teams on their toes. Multiple security researchers homed in on suspicious and malicious apps on Google Play, affecting thousands of Android users. A new variant of Mac malware Proton was also found in the wild, this time...

Threat Outbreak Alert RuleID30978: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55634 First Published: 2017 October 19 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30978 may contain the following files: Name |...

419 scammer offers USD $60 million—and a free child

Scammers often come crawling out of the woodwork in all sorts of places you wouldn't necessarily expect. This is to their advantage when trying to keep suspicion in check; after all, we're pretty much pre-programmed to think 419 scams will only wander into our inboxes. Twitter, though? That's a...

Scam Alert: Your Trusted Friends Can Hack Your Facebook Account

If you receive a message from any of your Facebook Friends asking for urgent help to recover their Facebook account, since they've added you as one of their 'Trusted Contacts'—just don’t blindly believe it. Researchers have detected a new Facebook phishing scam that can even trick an experienced...

Threat Outbreak Alert RuleID30943: Email Messages Distributing Malicious Software on October 12, 2017

Medium Alert ID: 55591 First Published: 2017 October 12 13:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30943 may contain the following files: Name |...

A new kind of Apple phishing scam

In a recent blog post, Felix Krause revealed a method for phishing Apple ID passwords on iOS that would be quite indistinguishable from a real iOS password request. This got us thinking about the ramifications—how else could this tactic be used in the Apple ecosystem, and what kind of damage coul...

FreeMilk Phishing Scam Hijacks Active Email Conversations to Deploy Malware

By Waqas The IT security researchers at Palo Alto Networks Unit 42 This is a post from HackRead.com Read the original post: FreeMilk Phishing Scam Hijacks Active Email Conversations to Deploy Malware...

A week in security (September 25 – October 01)

Recently, we talked about the hacking incident at Deloitte, one of the 'big four' global accounting firms. It was reported that client email addresses, usernames, and passwords were exposed. This also brought to light weaknesses in their policies and lack of threat intelligence to recover leaked...

Tech support scammers abuse native ad and content provider Taboola to serve malvertising (updated)

A large number of publishers - big and small - are monetizing their sites by selling space for companies that provide so-called native advertising, cited as more effective and engaging than traditional banner ads. Indeed, on a news or entertainment site, users are more inclined to click on links...

A week in security (September 18 – September 24)

Last week, we kept you updated on our blog about the infected versions of CCleaner that were offered as downloads on the official servers. We also warned you against a fake IRS notice that delivers a customized spying tool, some of the threats currently facing gamers, and a Netflix scam that has...

New ransomware scam asks for nude pics to unlock files

By Uzair Amir A few months ago, two ransomware scams made news for This is a post from HackRead.com Read the original post: New ransomware scam asks for nude pics to unlock files...

Netflix scam warning

Always be on your toes While we are used to receiving scam attempts pretending to be from banks, online shops, credit card companies, and international courier services that does not mean all the other emails are safe. Far from it. To demonstrate this point we will show you a scam aimed at Netfli...

FTC providing partial refunds for Advanced Tech Support victims

Last month, the FTC announced the recovery of 10 million dollars from Advanced Tech Support, one of the most successful US-based tech support scammers ever. This money will be put towards partial refunds for victims of ATS who purchased products or services from them between April 2012 and Novemb...

Threat Outbreak Alert RuleID30654: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55322 First Published: 2017 September 18 15:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30654 may contain the following files: Name ...

Vevo Music Video Service Hacked — 3.12TB of Internal Data Leaked

OurMine is in headlines once again—this time for breaching the popular video streaming service Vevo. After hunting down social media accounts of HBO and defacing WikiLeaks website, the infamous self-proclaimed group of white hat hackers OurMine have hacked Vevo and leaked about 3.12 TB worth of...

LinkedIn Phishing Scam Steals Gmail Credentials Through Google Docs

By Waqas LinkedIn, a business and employment-oriented social networking website contain personal information This is a post from HackRead.com Read the original post: LinkedIn Phishing Scam Steals Gmail Credentials Through Google Docs...

Yet Another Android Malware Infects Over 4.2 Million Google Play Store Users

Even after so many efforts by Google, malicious apps somehow managed to fool its Play Store's anti-malware protections and infect people with malicious software. The same happened once again when at least 50 apps managed to make its way onto Google Play Store and were successfully downloaded as...

“Your Windows has Been Banned” Malware Returns with Higher Ransom Demand

By Uzair Amir “Your Windows Has Been Banned” malware is back and this This is a post from HackRead.com Read the original post: Your Windows has Been Banned Malware Returns with Higher Ransom Demand...

Russian Lawmaker’ Son Pleads Guilty to $50M Hacking Scam

By Uzair Amir Russian Lawmaker’s Son Pleads Guilty to Wire Fraud and Identity This is a post from HackRead.com Read the original post: Russian Lawmaker’ Son Pleads Guilty to $50M Hacking Scam...

Fake DHS email – “Give us $350 in the next 24 hours”

Who likes threats? Nobody, as it turns out. That hasn't stopped scammers from jumping on the menacing email train - next stop, your inbox. Every now and then, we see the 419 "Hitman deployed to kill you" missive doing the rounds. On a similar threatening note, we have a fake DHS notification...