Phishing

More than $80 million worth of digital assets from over 100 cryptocurrency brands were exfiltrated by the Inferno Drainer cryptocurrency scam last year, making it the most prolific cryptocurrency drainer last year despite ceasing operations in November, according to SiliconAngle.

BleepingComputer reports that phishing attacks involving fraudulent antivirus subscription renewal emails have facilitated the theft of $34,000.

Third-party breach hits Framework Computer U.S. modular laptop manufacturer Framework Computer had information from an undisclosed number of customers compromised following a successful phishing attack against its third-party accounting service provider Keating Consulting Group, according to BleepingComputer.

The cybersecurity company, a Google subsidiary, said a 2FA policy change on X helped enable the “brute force” attack.

BleepingComputer reports that major organizations are having their employees targeted by new phishing attacks exploiting messages concerning annual Human Resources department tasks to facilitate credential exfiltration activities.

Numerous phishing attacks have been launched by the Water Curupira operation to deploy the PikaBot loader malware as part of campaigns that initially ran from early to mid-2023 before reemerging in September, The Hacker News reports.

Hacked YouTube channels leveraged for Lumma Stealer distribution Several YouTube channels have been compromised to enable the distribution of the Lumma Stealer information-stealing malware via videos purporting to share cracked versions of legitimate software, reports Hackread.