Phishing

Phishing, malware attacks spike in third quarter cyberattacks involving phishing and malware have grown by 173% and 110%, respectively, during the third quarter, compared with the second quarter, reports SiliconAngle.

Phishing attacks leveraging a new high-severity WinRAR vulnerability, tracked as CVE-2023-38831, have been deployed by pro-Russian hacking operations in a bid to facilitate credential exfiltration, The Hacker News reports.

Researchers have noticed a surge in campaigns deploying DarkGate malware via messaging platforms Skype and Microsoft Teams.

Cofense researchers say new attacks with LinkedIn Smart Links target user email credentials mostly in the financial and manufacturing sectors.

Significantly more phishing scams involving the spoofing of the U.S. Postal Service and postal services in other countries, including Mexico, Costa Rica, Chile, Finland, Australia, and the Netherlands, aimed at exfiltrating personal and financial information have emerged in recent weeks, according to KrebsonSecurity.

Scams originating on social media are responsible for $2.7 billion in losses since 2021, more than any other contact method, according to new data shared by the FTC.

Numerous improvements are being considered to be implemented by Google and Yahoo to curb spam emails and bulk senders in their respective email clients, reports The Record, a news site by cybersecurity firm Recorded Future.

C-level staff working across a range of industries were lured to phishing sites via redirect links purportedly from the popular Indeed job-search site.