A week in security (February 23 – March 1)

Last week on Malwarebytes Labs: Public Google API keys can be used to expose Gemini AI data Inside a fake Google security check that becomes a browser RAT Fake Zoom and Google Meet scams install Teramind: A technical deep dive How to understand and avoid Advanced Persistent Threats The Conduent...

Refund scam impersonates Avast to harvest credit card details

A fraudulent website dressed in Avast’s brand is tricking French-speaking users into handing over their full credit card details—card number, expiry date, and three-digit security code—under the cover story of processing a €499.99 refund that was never owed to them. The operation combines live ch...

Tax refund scam targets Californians

The State of California Franchise Tax Board FTB recently issued a warning to taxpayers to protect themselves from tax scams. In their warning the FTB states: “Recently, the FTB received reports of a scam targeting taxpayers through text messages that appear to be from FTB. These text messages...

Scammers Impersonate Authorities to Swipe OTPs with Remote Access Apps

SUMMARY Cybersecurity researchers at Group-IB have discovered a sophisticated refund scam where scammers are using remote access tools…...

Cybercriminals Using Telekopye Telegram Bot to Craft Phishing Scams on a Grand Scale

More details have emerged about a malicious Telegram bot called Telekopye that's used by threat actors to pull off large-scale phishing scams. "Telekopye can craft phishing websites, emails, SMS messages, and more," ESET security researcher Radek Jizba said in a new analysis. The threat actors...

Tax refund phish logs keystrokes to swipe personal details

Theres been some smart phishing campaigns running over the last few weeks, and this one is particularly sneaky. Bleeping Computer reports that a phishing page is targeting Greek taxpayers with a tax refund scam. The added sting in the tail comes in the form of an embedded keylogger which grabs...

Annoyingly Believable Tax Refund Scam Targets Mobile

A text message-based tax scam is making the rounds in the U.K., in a probable harbinger of things to come as the U.S. tax season gets underway in earnest. SMS messages are going out to unsuspecting U.K. citizens claiming to be from Her Majesty’s Revenue and Customs HMRC, the country’s...

Threat Outbreak Alert RuleID25281: Email Messages Distributing Malicious Software on September 27, 2016

Medium Alert ID: 49052 First Published: 2016 September 27 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25281 may contain the following files: Name ...

Threat Outbreak Alert RuleID13245: Email Messages Distributing Malicious Software on January 23, 2015

Medium Alert ID: 37142 First Published: 2015 January 26 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13245 may contain the following files: Name |...

Threat Outbreak Alert: Fake Tax Refund Notification Email Messages on March 21, 2014

Medium Alert ID: 33457 First Published: 2014 March 21 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax refund notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Tax Refund Notification Email Messages on January 21, 2014

Medium Alert ID: 32509 First Published: 2014 January 21 21:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax refund notification from TurboTax for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Tax Information Notification Email Messages on October 16, 2013

Medium Alert ID: 31288 First Published: 2013 October 16 15:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a tax refund notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Tax Refund Notification Email Messages on July 23, 2013

Medium Alert ID: 30177 First Published: 2013 July 23 15:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax refund form attachment for the recipient. The text in the email message attempts to convince the recipient to...