Phishing

QakBot trojan tactics live on in DarkGate, PikaBot malware attacks Attack techniques once used to disseminate the dismantled QakBot trojan, also known as QBot and Pinkslipbot, have been leveraged in a new widespread phishing campaign involving the DarkGate and PikaBot strains aimed at various industries, according to The Hacker News.

Mounting QR code phishing attacks amid the COVID-19 pandemic have led SlashNext to introduce the new QR Code Phishing Protection service, which has been touted as the first-ever solution enabling multi-channel quishing defenses, reports SiliconAngle.

Threat actors have been facilitating new spam attacks by exploiting the quiz results functionality of Google Forms, SiliconAngle reports.

Novel social engineering attack infrastructure established by BlueNoroff New fraudulent skills assessment portals have been established by North Korean hacking operation BlueNoroff, also known as Sapphire Sleet, as part of its new infrastructure for facilitating social engineering attacks aimed at exfiltrating cryptocurrency, BleepingComputer reports.

MFA and SEO poisoning attacks grow more popular with phishers as hacking tools grow more automated.

The FBI warns the gang is up to its old tricks, initiating ransomware attacks by executing a complex but effective social-engineering scam.

Cyberattack hits Ace Hardware BleepingComputer reports that most IT systems of Ace Hardware have been disrupted by a cyberattack over the weekend, affecting many key operating systems of the U.S. multinational hardware store retailers' cooperative, including those for scheduling deliveries and processing additional orders.

Two Israeli organizations have been targeted by Iranian state-backed threat operation MuddyWater, also known as Mango Sandstorm and Static Kitten, in a new spear-phishing campaign that distributed N-able's Advanced Monitoring Agent remote administration tool, according to The Hacker News.