Phishing

U.S. payments processing firm Payoneer has disclosed that some of its customer accounts were compromised as a result of a phishing campaign following reports from several users noting account breaches, password replacements, and fund exfiltration, according to The Record, a news site by cybersecurity firm Recorded Future.

Widespread phishing campaign deployed by reemerging TA866 Threat operation TA866 has reemerged with a new massive phishing campaign aimed at North America after being absent from the threat landscape for nine months, The Hacker News reports.

Three Microsoft applications can leak hashed passwords in just one or two clicks, researchers say.

Security pros say APT group could move from university researchers to critical infrastructure sectors and other verticals.

More than $80 million worth of digital assets from over 100 cryptocurrency brands were exfiltrated by the Inferno Drainer cryptocurrency scam last year, making it the most prolific cryptocurrency drainer last year despite ceasing operations in November, according to SiliconAngle.

BleepingComputer reports that phishing attacks involving fraudulent antivirus subscription renewal emails have facilitated the theft of $34,000.