Phishing

Here’s why bad actors go after gTLDs for domain impersonation attacks – and what to do about it.

PhishWP imitates trusted payment services and sends stolen information directly to Telegram.

Wallet drainer attack activity was particularly elevated during the first three months of 2024, with the loss of $55.4 million worth of cryptocurrency in the year's biggest heist bringing stolen proceeds to $187 million, according to a study from Scam Sniffer.

Malicious emails using code of conduct-related lures deceive targets into opening an image file-spoofing RAR archive that deploys a Windows executable that runs PLAYFULGHOST.

While the app gets distributed via a GitHub phishing site, all Android users worldwide are at risk.

The upcoming year may prove pivotal for identity security. Here's a forecast for 2025.

Attacks with the new VBCloud malware have been deployed by Russian state-backed threat operation Cloud Atlas, also known as Clean Ursa, Oxygen, Inception, and Red October, to facilitate data theft against dozens of users, most of whom are in Russia, reports The Hacker News.

Major U.S. aerospace and defense firm General Dynamics has confirmed having dozens of employee benefits accounts breached following a phishing attack in October, SecurityWeek reports.