A week in security (June 22 – 28)

Last week on Malwarebytes Labs, we provided a zero-day guide for 2020 featuring recent attacks and advanced preventive techniques, and we learned how to cough in the face of scammers, offering security tips for the 2020 tax season. We also looked at a web skimmer hiding within EXIF metadata that...

Fake version of note sharing site Privnote.com stealing users’ Bitcoin

By Waqas A fake version of popular encrypted messages web service Privnote.com that’s redirecting user’s cryptocurrency to scammers. This is a post from HackRead.com Read the original post: Fake version of note sharing site Privnote.com stealing users’ Bitcoin...

YouTube scammers impersonated Elon Musk, SpaceX; stole $150k in BTC

By Deeba Ahmed Scammers successfully tricked viewers in to sending a small amount of Bitcoin and get double in return. This is a post from HackRead.com Read the original post: YouTube scammers impersonated Elon Musk, SpaceX; stole $150k in BTC...

Scammers using voicemail email phishing scam to steal data

By Waqas Scammers are taking advantage of COVID-19 pandemic to spread a voicemail email phishing scam. This is a post from HackRead.com Read the original post: Scammers using voicemail email phishing scam to steal data...

Facebook Announces Messenger Security Features that Don't Compromise Privacy

Note that this is "announced," so we don't know when it's actually going to be implemented. Facebook today announced new features for Messenger that will alert you when messages appear to come from financial scammers or potential child abusers, displaying warnings in the Messenger app that provid...

Targeted Phishing Attacks Successfully Hacked Top Executives At 150+ Companies

In the last few months, multiple groups of attackers successfully compromised corporate email accounts of at least 156 high-ranking officers at various firms based in Germany, the UK, Netherlands, Hong Kong, and Singapore. Dubbed 'PerSwaysion,' the newly spotted cyberattack campaign leveraged...

Exclusive: Scammers using fake WHO Bitcoin wallet to steal donation

By Waqas Scammers are disguising as representatives from the World Health Organization WHO to scam... This is a post from HackRead.com Read the original post: Exclusive: Scammers using fake WHO Bitcoin wallet to steal donation...

Dark web scammers selling ventilators & MP3 files to kill Coronavirus

By Sudais Asif Dark web cybercriminals now claim to get your coronavirus infection cured by listening to the MP3 files they are selling. This is a post from HackRead.com Read the original post: Dark web scammers selling ventilators & MP3 files to kill Coronavirus...

Fake “Corona Antivirus” distributes BlackNET remote administration tool

Scammers and malware authors are taking advantage of the coronavirus crisis in full swing. We have seen a number of spam campaigns using COVID-19 as a lure to trick people into installing a variety of malware, but especially data stealers. As more of us work from home, the need to secure your...

Social Security Administration Designates March 5 as National ‘Slam the Scam’ Day

In association with the Federal Trade Commission’s National Consumer Protection Week, the Social Security Administration SSA has designated March 5 as National “Slam the Scam” Day to educate Americans about telephone scammers impersonating government employees. These scammers aim to gain potentia...

Burning Man Tickets for $225? Yep, Too Good to Be True

Burning Man aficionados anxious to get their tickets squared away for the 2020 “experience” should beware: Fake concert organizers are offering passes in what researchers say is a very convincing and sophisticated scam effort. Burning Man, which bills itself as a “vibrant participatory metropolis...

Popular YouTube gaming channel hacked to run crypto scam

By Deeba Ahmed The highly popular YouTube gaming channel boasting of 1.88 million subscribers, was hacked over the weekend by unidentified crypto scammers. This is a post from HackRead.com Read the original post: Popular YouTube gaming channel hacked to run crypto scam...

Phishing for Apples, Bobbing for Links

Anyone searching for a primer on how to spot clever phishing links need look no further than those targeting customers of Apple, whose brand by many measures remains among the most-targeted. Past stories here have examined how scammers working with organized gangs try to phish iCloud credentials...

How to Protect Holiday Shoppers from Bots and Scammers

It’s the most wonderful time of year for gift card scammers. With Black Friday, Cyber Monday and the holidays just around the corner, consumers will spend billions on gift cards for hard-to-shop-for friends, family, and colleagues. Imperva VP Tiffany Olson Kleemann was interviewed on Good Morning...

Sextortion scammers getting creative

We've covered sextortion before, focusing in on how the core of the threat is an exercise in trust. The threat actor behind the campaign will use whatever information available on the target that causes them to trust that the threat actor does indeed have incriminating information on them. They...

Rogue TrendMicro Employee Sold Customer Data to Tech Support Scammers

Do you always uncomfortable trusting companies with your data? If so, you're not alone. While companies do much to protect themselves from external threats, insiders always pose the highest risk to a company's data. Unfortunately, when we say companies can't eliminate insider threat completely,...

Scammers Are Exploiting a Firefox Bug to Freeze Your Browser

Fraudulent tech-support sites are causing the browser to lock up and display a disturbing message. Force quitting is the only way out...

Details of an Airbnb Fraud

This is a fascinating article about a bait-and-switch Airbnb fraud. The article focuses on one particular group of scammers and how they operate, using the fact that Airbnb as a company doesn't do much to combat fraud on its platform. But I am more interested in how the fraudsters essentially...

Global Crime Ring Bilks U.S. Military Members, Vets Out of Millions

Operators of a widespread identity-theft and fraud scheme have bilked thousands of U.S. servicemembers and veterans out of millions of dollars in stolen funds and Veterans Affairs VA benefits payments. Fredrick Brown pled guilty this week, revealing that in his role as a civilian medical records...

Steam-powered scammers

Digital game distribution services have not only simplified the sale of games themselves, but provided developers with additional monetization levers. For example, in-game items, such as skins, equipment, and other character-enhancing elements as well as those that help one show up, can be sold f...