Phishing

Threat actors have been facilitating new spam attacks by exploiting the quiz results functionality of Google Forms, SiliconAngle reports.

Novel social engineering attack infrastructure established by BlueNoroff New fraudulent skills assessment portals have been established by North Korean hacking operation BlueNoroff, also known as Sapphire Sleet, as part of its new infrastructure for facilitating social engineering attacks aimed at exfiltrating cryptocurrency, BleepingComputer reports.

MFA and SEO poisoning attacks grow more popular with phishers as hacking tools grow more automated.

The FBI warns the gang is up to its old tricks, initiating ransomware attacks by executing a complex but effective social-engineering scam.

Cyberattack hits Ace Hardware BleepingComputer reports that most IT systems of Ace Hardware have been disrupted by a cyberattack over the weekend, affecting many key operating systems of the U.S. multinational hardware store retailers' cooperative, including those for scheduling deliveries and processing additional orders.

Two Israeli organizations have been targeted by Iranian state-backed threat operation MuddyWater, also known as Mango Sandstorm and Static Kitten, in a new spear-phishing campaign that distributed N-able's Advanced Monitoring Agent remote administration tool, according to The Hacker News.

SiliconAngle reports that phishing attacks have increased by 1,265% between the fourth quarter of 2022 and the third quarter of 2023, while credential phishing attacks have risen by 967% over the same period, with the growth fueled by the increasing adoption of generative artificial intelligence.