Tag: Social Engineering
Fake payroll apps quietly slip remote control onto HR laptops
A campaign offers fake desktop clients for three US payroll platforms, then installs ScreenConnect to give an attacker unattended access…
A placeholder web address in 1,700 repos now serves malware
The documentation stand-in third-party[.]com has been weaponised, serving a ClickFix lure that poisons the clipboard on Windows machines.
Fake recruiters call Rust maintainers to plant malware on their Macs
Fake recruiters are booking video calls with Rust maintainers and pushing malware.
Scattered Spider’s Ahmed Elbadawy pleads guilty and forfeits $17.6M
A year-old sealed plea became public this week when prosecutors moved to seize about $17.6M in crypto, vehicles and luxury…
Hijacked HBO Max account floods Reddit with ClickFix ads
A verified HBO Max Reddit account pushed 108 malicious ads in 48 hours, part of a broader operation spreading infostealers.
Fake Cloudflare page on Indian IT agency site pushed terminal commands
A government-linked Indian IT portal served a fake Cloudflare check that tried to get visitors to run a copied command.
Revolut treated a spoofed agency email as a lawful data request
A forged request sent from inside a real government domain was enough to pull identity documents, selfies, and Bitcoin histories…
AdaptHealth breach touches health records of 4.1 million people
A June intrusion at the medical equipment network reached patient and insurance data.