Phishing

Obfuscation tactics to bypass security system detection have been implemented in 55.2% of phishing emails from January to September 2023, representing a 24.4% increase over the same period last year, SiliconAngle reports.

Hackers tricked an employee into downloading the previously unseen malware by claiming he was in the running for a job at Meta.

Threat actors have leveraged the ZeroFont phishing attack technique, which initially involved the insertion of hidden characters or words in emails to evade security detection systems, to modify message previews as shown on Microsoft Outlook and other email clients, BleepingComputer reports.

Threat actors have targeted Ukrainian military organizations with a new STARK#VORTEX phishing campaign deploying the Merlin post-exploitation toolkit through malicious files purporting to be service manuals for unmanned aerial vehicles or drones, reports The Hacker News.

OpenSea has confirmed being impacted by a third-party security breach, marking the third attack against the major non-fungible token marketplace following a third-party hack and phishing incident in June 2022 and February 2022, respectively, SiliconAngle reports.

An authentic-looking page and an almost genuine URL can be enough to entice users to download malicious software.