FTC providing partial refunds for Advanced Tech Support victims

Last month, the FTC announced the recovery of 10 million dollars from Advanced Tech Support, one of the most successful US-based tech support scammers ever. This money will be put towards partial refunds for victims of ATS who purchased products or services from them between April 2012 and Novemb...

Threat Outbreak Alert RuleID30654: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55322 First Published: 2017 September 18 15:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30654 may contain the following files: Name ...

Vevo Music Video Service Hacked — 3.12TB of Internal Data Leaked

OurMine is in headlines once again—this time for breaching the popular video streaming service Vevo. After hunting down social media accounts of HBO and defacing WikiLeaks website, the infamous self-proclaimed group of white hat hackers OurMine have hacked Vevo and leaked about 3.12 TB worth of...

LinkedIn Phishing Scam Steals Gmail Credentials Through Google Docs

By Waqas LinkedIn, a business and employment-oriented social networking website contain personal information This is a post from HackRead.com Read the original post: LinkedIn Phishing Scam Steals Gmail Credentials Through Google Docs...

Yet Another Android Malware Infects Over 4.2 Million Google Play Store Users

Even after so many efforts by Google, malicious apps somehow managed to fool its Play Store's anti-malware protections and infect people with malicious software. The same happened once again when at least 50 apps managed to make its way onto Google Play Store and were successfully downloaded as...

“Your Windows has Been Banned” Malware Returns with Higher Ransom Demand

By Uzair Amir “Your Windows Has Been Banned” malware is back and this This is a post from HackRead.com Read the original post: Your Windows has Been Banned Malware Returns with Higher Ransom Demand...

Russian Lawmaker’ Son Pleads Guilty to $50M Hacking Scam

By Uzair Amir Russian Lawmaker’s Son Pleads Guilty to Wire Fraud and Identity This is a post from HackRead.com Read the original post: Russian Lawmaker’ Son Pleads Guilty to $50M Hacking Scam...

Fake DHS email – “Give us $350 in the next 24 hours”

Who likes threats? Nobody, as it turns out. That hasn't stopped scammers from jumping on the menacing email train - next stop, your inbox. Every now and then, we see the 419 "Hitman deployed to kill you" missive doing the rounds. On a similar threatening note, we have a fake DHS notification...

GitLab: Impersonation attack via Broken Link in Resellers Page

Summary A link on https://about.gitlab.com/resellers/ was broken and could've allowed a user to impersonate a reseller and attack / scam your customers. Proof of Concept 1. Visit https://about.gitlab.com/resellers/ 2. Hit Ctrl+F and find "intenso" F219301 3. Now click the Facebook link and you'll...

Phishing Scam: Hackers Steal $11 Million from Canadian University

By Carolina A couple of weeks ago on August 23rd in Edmonton, This is a post from HackRead.com Read the original post: Phishing Scam: Hackers Steal $11 Million from Canadian University...

Nigerian scams without the Nigerians

Users in English speaking countries are quite familiar with the Nigerian scam: an important guy in Nigeria needs your help getting his money out of the country and if you assist with some transaction fees, a chunk of his fortune could be yours. But what about non-English speaking countries? What...

'HoeflerText' Popups Target Browsers With RAT and Locky Ransomware

A malware campaign utilizing bogus popups that alert users to a missing web-font is targeting Google Chrome and Firefox browser users. The popups contain a malicious JavaScript file that initiates the download of either the NetSupport Manager remote access tool RAT or Locky ransomware. The...

New Ransomware Email Scam Using FBI and IRS as Bait

By Carolina Email scams have become so common nowadays that every other This is a post from HackRead.com Read the original post: New Ransomware Email Scam Using FBI and IRS as Bait...

419 spam: 10 million US dollars, courtesy of “Rev. Goodluck Ebola”

I'm not saying an email claiming to be from the "Central Bank of Nigeria" with a contact handler named "Rev. Goodluck Ebola" will raise too many red flags, but… Click to Enlarge CENTRAL BANK OF NIGERIA OFFICE OF THE GOVERNOR Zaria Street, Off Samuel Akintola Street,Garki 11, Garki-Abuja. Our Ref:...

Beware of Hurricane Harvey Relief Scams

U.S. federal agencies are warning citizens anxious to donate money for those victimized by Hurricane Harvey to be especially wary of scam artists. In years past we've seen shameless fraudsters stand up fake charities and other bogus relief efforts in a bid to capitalize on public concern over an...

“Wanna see the Game of Thrones in advance” email delivers malware

By Carolina Beware of Email promising Game of Thrones Spoilers because it This is a post from HackRead.com Read the original post: Wanna see the Game of Thrones in advance email delivers malware...

Warning: Enigma Hacked; Over $470,000 in Ethereum Stolen So Far

More Ethereum Stolen! An unknown hacker has so far stolen more than $471,000 worth of Ethereum—one of the most popular and increasingly valuable cryptocurrencies—in yet another Ethereum hack that hit the popular cryptocurrency investment platform, Enigma. According to an announcement made on thei...

7 More Chrome Extensions Hacked via Phishing Scam

By Waqas Google Chrome Extensions on the Radar of Cybercriminals of late- This is a post from HackRead.com Read the original post: 7 More Chrome Extensions Hacked via Phishing Scam...

Google Removes Chrome Extension Used in Banking Fraud

Google has removed from the Chrome Web Store a malicious browser extension used by criminals in Brazil to target corporate users with the aim of stealing banking credentials. The twist is that the attackers did their homework on their targets, learning via social networks whom inside an...

A week in security (July 31 – August 6)

Last week we explored some basic PowerShell commands, dived into the new methods used by TrickBot, and wrote at length about the Magnitude exploit kit redirection chain. Our teams were busy at both BlackHat and DefCon, and outside of those famous hallways, we also took time to fire up some basic...