Information security
fromSecuritymagazine
1 day ago35,000 Users Targeted in Phishing Campaign in Just Two Days
A sophisticated phishing campaign targeted over 35,000 users across 13,000 organizations in 26 countries, primarily in the U.S.
#data-theft
#data-theft
[ follow ]
#cybersecurity #malware #cybercrime #ransomware #phishing #social-engineering #hacking #supply-chain-attack
#phishing
Marketing tech
fromIT Pro
1 year agoThis hacker group is posing as IT helpdesk workers to target enterprises - and researchers warn its social engineering techniques are exceptionally hard to spot
Phishing campaigns have intensified, with the Luna Moth group targeting US legal and financial sectors using fake helpdesk domains.
#cybersecurity
Information security
fromTheregister
1 week agoCrime crew impersonates help desk, abuses Teams chats
A new threat group uses social engineering and custom malware to steal data through Microsoft Teams and phishing tactics.
Information security
fromThe Hacker News
1 month agoDarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover
DarkSword, a new iOS exploit kit targeting iPhones running iOS 18.4-18.7, has been deployed by multiple threat actors since November 2025 to steal credentials and cryptocurrency wallet data.
#iphone-security
Information security
fromEngadget
1 month agoA new iPhone hacking tool puts anyone still on iOS 18 at risk
DarkSword is a fileless iPhone hacking technique that steals sensitive data through malicious web pages and automatically deletes evidence, potentially affecting close to a quarter of iPhones running iOS 18.
Information security
fromThe Hacker News
1 month agoMalicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials
A malicious npm package impersonating OpenClaw deploys a remote access trojan and steals sensitive data including credentials, crypto wallets, SSH keys, and browser data from infected systems.
fromSecurityWeek
2 months agoLeakBase Cybercrime Forum Shut Down, Suspects Arrested
A credit-based economy and reputation-driven user system helped build trust among offenders and sustain a thriving underground forum. One of the forum's notable internal rules prohibited the sale or publication of any data related to Russia, hinting at the origin of LeakBase's operators.
Privacy professionals
Information security
fromTheregister
2 months agoDouble whammy: Steaelite RAT bundles data theft, ransomware
Steaelite, a new remote access trojan sold on cybercrime networks, enables double extortion attacks on Windows machines through ransomware, data theft, credential stealing, and live surveillance controlled via a centralized browser-based dashboard.
France news
fromTechCrunch
3 months agoFrench police search X office in Paris, summons Elon Musk for questioning | TechCrunch
French authorities raided X's Paris office in an expanded probe into fraudulent data extraction, distribution of child sexual abuse material, privacy violations, and Holocaust denial.
Information security
fromFortune Crypto
7 months agoSuspect in Coinbase hack kept data for more than 10,000 customers on her phone, court filing alleges | Fortune Crypto
A TaskUs employee, Ashita Mishra, stole and sold Coinbase customer data enabling criminals to impersonate staff and steal cryptocurrency, affecting over 69,000 customers.
fromIT Pro
8 months agoMillions of Dell laptops are are at risk thanks to a Broadcom chip vulnerability - and more than 100 device models are impacted
These findings highlight the importance of evaluating the security posture of all hardware components within your devices, not just the operating system or software.
Privacy technologies
Node JS
fromBleepingComputer
11 months agoDozens of malicious packages on NPM collect host and network data
60 malicious NPM packages were found that collect sensitive data and send it to threat actors through Discord webhooks.
Threat actors employed names similar to legitimate packages to deceive developers and infiltrate systems.
[ Load more ]