Binance performs monthly simulated phishing attacks on its employees to test security hygiene, with remediation training for failures and potential termination for repeated failures, highlighting crypto industry's social engineering attack preparedness.
AegisAI, founded by former Google security executives, secured $36 million in Series A funding led by Battery Ventures to combat the rise of AI-powered spear phishing attacks. The startup uses AI agents to detect sophisticated email threats that bypass traditional security systems.
Deutsche und US-Ermittler haben den Phishing-Dienst »Kratos« zerschlagen, der Hunderttausenden Opfern in über 30 Staaten Zugangsdaten gestohlen haben soll. Die Infrastruktur wurde lahmgelegt und der mutmaßliche Entwickler in Indonesien festgenommen. Kratos ermöglichte Kriminellen, täuschend echte Webseiten für Phishing-Kampagnen zu erstellen und Zwei-Faktor-Authentifizierungen zu umgehen.
Scammers are sending sophisticated fake X (formerly Twitter) login notification emails that closely mimic legitimate alerts to trick users into revealing their passwords or granting malicious app access. Cybersecurity experts advise users to avoid clicking links and instead check the official app for security issues.
A hacking attack targeting researchers and policy makers using emails disguised as academic conference materials has been detected. The attack, suspected to be by North Korean hacking group APT37, uses a method where malware runs in the background while the victim views the materials.
Hong Kong crypto platforms have until July 8, 2027, to replace one-time passwords (OTPs) with stronger security measures for client logins and device registration. The SFC requires firms to adopt authentication resistant to phishing, citing past fraud campaigns where OTPs were compromised. Licensed virtual asset service providers and internet brokers must implement these changes, with larger firms expected to act immediately.
Hong Kong's SFC has issued new rules for virtual asset trading platforms and online brokers, requiring phishing-resistant authentication like passkeys and hardware keys, and banning SMS/email OTPs. The move aims to bolster cybersecurity amid rising crypto scams.
The Times of India introduces 'Hack of the Day' with a focus on passkeys as a secure, password-free alternative for digital accounts. Passkeys use biometrics or device locks, offering enhanced security against phishing and simplifying login processes.
A crypto user lost nearly $1 million in USDT on Ethereum after signing a phishing token approval. This incident highlights the ongoing threat of social engineering scams in the crypto industry, which have already resulted in hundreds of millions in losses this year.
Belgian police arrested a 19-year-old suspected of leading a phishing and money-laundering network that stole over €500,000 using fake government emails. The suspect was found in an Airbnb in Antwerp, where a second individual was also apprehended. The investigation highlights crypto's role in laundering illicit funds and the broader threat of phishing to crypto investors.
Russia's Center for Monitoring and Management of the Public Communications Network, under Roskomnadzor, blocked 2,615 phishing resources and 389 malware sites in June. Specialists also repelled 1,460 DDoS attacks, with the longest lasting nearly four days.
A Polícia Federal (PF) iniciou a Operação Ad Phishing, investigando 1.770 anúncios digitais fraudulentos que usavam a imagem do governo federal e instituições públicas para legitimar páginas falsas. Nove mandados de busca e apreensão são cumpridos em quatro estados brasileiros.
PMEs tornaram-se o principal alvo de ataques cibernéticos, representando 62% dos incidentes, segundo IBM Security. No Brasil, Kaspersky registrou 553 milhões de tentativas de phishing em 12 meses, com 43% visando PMEs. A falta de recursos e defesas frágeis tornam-nas vulneráveis, e mais de 60% fecham após ataques de ransomware. O artigo detalha as vulnerabilidades e oferece medidas preventivas, como terceirização de TI, MFA e políticas de segurança.
Hong Kong police and mainland Chinese authorities arrested 15 individuals between March and June, dismantling a cross-border phishing syndicate that defrauded victims of HK$16.8 million by impersonating the Water Supplies Department through malicious text messages.
Polymarket suffered a $2.94 million phishing attack affecting at least 11 user wallets due to a malicious script injected via a third-party vendor compromise. The prediction market platform has contained the issue, removed the dependency, and promised full refunds to affected users.
O firewall tradicional se tornou obsoleto contra ameaças modernas. O Firewall de Nova Geração (NGFW) oferece inspeção profunda de pacotes, controle de aplicações e IA para proteger empresas em ambientes de home office e nuvem.
DMM, NATO Zirvesi'ni bahane eden oltalama saldırıları tespit etti. Dolandırıcılar, sahte e-posta ve SMS'lerle panik yaratarak kişisel bilgileri ele geçirmeye çalışıyor. Yetkililer, resmi kanallar dışındaki taleplere itibar edilmemesi uyarısı yaptı.
İçişleri Bakanlığı, siber suçlarla mücadele kapsamında son 5 günde 23 ilde düzenlenen operasyonlarda 330 şüpheli yakaladığını duyurdu. Yakalananlardan 91'i tutuklanırken, 70'i hakkında adli kontrol kararı verildi.
Dois irmãos foram presos em operação conjunta entre DF, TO e MA por golpes com criptomoedas e tráfico de drogas. Um deles mantinha laboratório de crack e cocaína. Os criminosos usavam sites falsos e anúncios patrocinados para enganar investidores.
La police sud-coréenne a arrêté 23 personnes pour avoir blanchi 11,1 millions de dollars en cryptomonnaies, fonds provenant d'une organisation de phishing cambodgienne. Le chef du réseau est recherché par Interpol.
Ataques de ransomware paralisam operações e exigem resgate milionário. Brasil é o 3º país mais visado, com custos médios de violação de dados em R$ 7,19 milhões. Empresas precisam de estratégias de prevenção, resposta e recuperação.
Circa 2 milioni di italiani hanno ricevuto un'email di phishing che si spaccia per l'Agenzia delle Entrate, promettendo un rimborso fiscale per indurli a fornire coordinate bancarie. L'associazione Codici Lombardia denuncia la truffa e avvisa i cittadini.
South Korean police arrested 23 individuals for laundering $4.1 million in crypto for a Cambodia-based phishing operation. The alleged ringleader is at large, and authorities seized $431,000 in proceeds. Experts warn the Southeast Asian scam ecosystem remains a persistent concern.
The FBI has issued a warning about Kali365, a Phishing-as-a-Service platform distributed via Telegram. It enables cybercriminals to steal Microsoft 365 OAuth tokens, bypassing MFA and gaining persistent access to accounts.
