GitLab: Impersonation attack via Broken Link in Resellers Page

Summary A link on https://about.gitlab.com/resellers/ was broken and could've allowed a user to impersonate a reseller and attack / scam your customers. Proof of Concept 1. Visit https://about.gitlab.com/resellers/ 2. Hit Ctrl+F and find "intenso" F219301 3. Now click the Facebook link and you'll...

Phishing Scam: Hackers Steal $11 Million from Canadian University

By Carolina A couple of weeks ago on August 23rd in Edmonton, This is a post from HackRead.com Read the original post: Phishing Scam: Hackers Steal $11 Million from Canadian University...

Nigerian scams without the Nigerians

Users in English speaking countries are quite familiar with the Nigerian scam: an important guy in Nigeria needs your help getting his money out of the country and if you assist with some transaction fees, a chunk of his fortune could be yours. But what about non-English speaking countries? What...

'HoeflerText' Popups Target Browsers With RAT and Locky Ransomware

A malware campaign utilizing bogus popups that alert users to a missing web-font is targeting Google Chrome and Firefox browser users. The popups contain a malicious JavaScript file that initiates the download of either the NetSupport Manager remote access tool RAT or Locky ransomware. The...

New Ransomware Email Scam Using FBI and IRS as Bait

By Carolina Email scams have become so common nowadays that every other This is a post from HackRead.com Read the original post: New Ransomware Email Scam Using FBI and IRS as Bait...

419 spam: 10 million US dollars, courtesy of “Rev. Goodluck Ebola”

I'm not saying an email claiming to be from the "Central Bank of Nigeria" with a contact handler named "Rev. Goodluck Ebola" will raise too many red flags, but… Click to Enlarge CENTRAL BANK OF NIGERIA OFFICE OF THE GOVERNOR Zaria Street, Off Samuel Akintola Street,Garki 11, Garki-Abuja. Our Ref:...

Beware of Hurricane Harvey Relief Scams

U.S. federal agencies are warning citizens anxious to donate money for those victimized by Hurricane Harvey to be especially wary of scam artists. In years past we've seen shameless fraudsters stand up fake charities and other bogus relief efforts in a bid to capitalize on public concern over an...

“Wanna see the Game of Thrones in advance” email delivers malware

By Carolina Beware of Email promising Game of Thrones Spoilers because it This is a post from HackRead.com Read the original post: Wanna see the Game of Thrones in advance email delivers malware...

Warning: Enigma Hacked; Over $470,000 in Ethereum Stolen So Far

More Ethereum Stolen! An unknown hacker has so far stolen more than $471,000 worth of Ethereum—one of the most popular and increasingly valuable cryptocurrencies—in yet another Ethereum hack that hit the popular cryptocurrency investment platform, Enigma. According to an announcement made on thei...

7 More Chrome Extensions Hacked via Phishing Scam

By Waqas Google Chrome Extensions on the Radar of Cybercriminals of late- This is a post from HackRead.com Read the original post: 7 More Chrome Extensions Hacked via Phishing Scam...

Google Removes Chrome Extension Used in Banking Fraud

Google has removed from the Chrome Web Store a malicious browser extension used by criminals in Brazil to target corporate users with the aim of stealing banking credentials. The twist is that the attackers did their homework on their targets, learning via social networks whom inside an...

A week in security (July 31 – August 6)

Last week we explored some basic PowerShell commands, dived into the new methods used by TrickBot, and wrote at length about the Magnitude exploit kit redirection chain. Our teams were busy at both BlackHat and DefCon, and outside of those famous hallways, we also took time to fire up some basic...

Tech Support Scammers Cast a Wider Net

Tech support scams may be old hat, but scammers are constantly reinventing them. The latest involves a wave of phishing emails that have proven to be a powerful tool for hackers to trick and ultimately extract money from victims. The Microsoft Malware Protection Center reported Monday it’s tracki...

Links in phishing-like emails lead to tech support scam

Note: Our Tech support scams FAQ page has the latest info on this type of threat, including scammer tactics, fake error messages, and the latest scammer hotlines. You can also read our latest blog, New tech support scam launches communication or phone call app. Tech support scams continue to...

IRS Warns Tax Professionals of New Scam to Steal Passwords

The Internal Revenue Service IRS, acting in concert with state tax agencies and the tax industry, has issued an IRS Security Summit Alert for tax professionals to beware of a new phishing email scam. Scam operators often use fraudulent e-mails to entice their targets to reveal login credentials...

Threat Outbreak Alert RuleID29835: Email Messages Distributing Malicious Software on July 17, 2017

Medium Alert ID: 54505 First Published: 2017 July 17 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29835 may contain the following files: Name | Siz...

Suspicious Site Containing Tech Scams

Many scams have emerged looking to steal money or information by giving users false information claiming that their computers are infected. After such claims they give the users a phone number to call or a way to pay to solve their issues. A successful attack can lead to stolen credentials or mon...

AlphaBay Shut Down After Police Raid; Alleged Founder Commits Suicide in Jail

AlphaBay Market — one of the largest Dark Web marketplaces for drugs, guns, and other illegal goods — that mysteriously went dark earlier this month without any explanation from its admins has reportedly been shut down by the international authorities. On July 4th, the dark web marketplace sudden...

The Slippery Slope Starts with "Get 2 Free Airline Tickets"

Written by Or Katz and Raviv Perets A widespread phishing scam that offers free airline tickets has been spotted in the wild by Akamai's Enterprise Threat Protector ETP security research team. The campaign uses a number of social engineering techniques to trick people into providing their private...

Report: Second quarter dominated by ransomware outbreaks

The second quarter of 2017 brought ransomware to unprecedented levels with worldwide outbreaks that went almost out of control. In scenarios reminiscent of yesteryears worms, WannaCry created global panic as it used a critical vulnerability in the SMBv1 protocol to propagate like wildfire. Within...