/
attack_type:phishing × criticity:medium × limpar

Resultados

29 casos · pág. 2/2

blog.checkpoint.com · medium

Q3 2026 brand phishing: Microsoft hits 33% of impersonation; lures target Claude, Antigravity, Apple, Docusign users

Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…

securityaffairs.com · medium

Security Affairs Malware Newsletter Round 119: IronChain, XWorm, PEERSTITCH, GhostAction and iOS exploit chain research

The Security Affairs Malware Newsletter Round 119 is a weekly digest of malware research published by Pierluigi Paganini. It lists reports on IronChain ransomware, the evolution of XWorm from infostealer to surveillance platform, and the Hirudo banking malware spread through fake updates and patched banking apps. It also covers PEERSTITCH…

securityaffairs.com · medium

INTERPOL Operation Serengeti III: 1,462 arrests, 10,909 networks disrupted and $105M recovered across 21 African countries

INTERPOL announced the results of Operation Serengeti III, run between 29 June and 31 August 2026 with law enforcement from 21 countries. The operation led to 1,462 arrests, disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. It targeted online fraud, ransomware, business email compromise (BEC), scam…

bleepingcomputer.com · · 5 fontes · 5 atualizações medium

Google adds ClickFix clipboard warnings and Gemini scam detection to Chrome Enhanced Protection; Apple blocks email identity resolution in Safari 27

On October 20, 2026, Google announced new Chrome defenses for users of Safe Browsing Enhanced Protection. They include a warning against ClickFix social engineering, in which suspicious commands copied by the user are scrubbed of personal information and sent to Safe Browsing for analysis (thehackernews.com, gbhackers.com, securityweek.co…

huntress.com · medium

Business email compromise (BEC): tactics, warning signs and defensive guidance, with $55B in reported global losses

Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…

welivesecurity.com · medium

AI-powered OSINT lowers the barrier for mass victim profiling, making ordinary users viable fraud targets

ESET's WeLiveSecurity warns that AI and large language models (LLMs) now automate OSINT reconnaissance at machine speed. Profiling that once took a skilled attacker hours or days can be done by low-skill actors, so ordinary internet users are now economically viable fraud targets. Fraudsters can collect public information at scale, includ…

thehackernews.com · · 2 fontes · 2 atualizações medium

INTERPOL Operation Serengeti III: 1,462 arrests, 10,909 malicious networks disrupted and over $105M recovered across 21 countries

INTERPOL announced the results of Operation Serengeti III on 22 October 2026. The coordinated action ran from June 29 to August 31, 2026 and targeted business email compromise (BEC), ransomware and online scams. It led to 1,462 arrests, the disruption of 10,909 malicious networks and the recovery of more than $105 million (bleepingcompute…

infosecurity-magazine.com · · 3 fontes · 3 atualizações medium

European Commission opens DSA investigation into Booking.com over fake listings, phishing/smishing scams and weak fraud defenses

The European Commission opened formal proceedings on 2026-10-21 under the Digital Services Act (DSA) against Booking.com, a very large online platform with more than 45 million EU users (theregister.com, olhardigital.com.br, infosecurity-magazine.com). The probe examines whether the company does enough to stop fraudsters from using the pl…

gbhackers.com · · 3 fontes · 3 atualizações medium

Check Point: AI-integrated antidetect browsers Kameleo, AdsPower and MultiLogin scale account takeover, fraud and influence operations

Check Point Research reports that commercial antidetect browsers, notably Kameleo, AdsPower and MultiLogin, are widely referenced on Russian-language underground forums and marketplaces. They are used for account takeover, payment card fraud (carding), fraudulent loan applications, ad-revenue fraud, bulk creation of fake accounts and coor…