/
fraud_type:phishing_scam × criticity:medium × latest_source_host:welivesecurity.com × limpar

Resultados

7 casos · pág. 1/1

welivesecurity.com · medium

Quishing rises to 11% of phishing emails in H1 2026, evading email filters; Kimsuky uses QR codes against US targets

ESET warns that QR-code phishing ("quishing") is a growing way to slip past corporate email security. According to the ESET Threat Report H1 2026, malicious QR codes were embedded in 11% of all phishing emails in the first half of 2026. The codes hide destination URLs from filters that cannot extract and inspect them, and they move the vi…

welivesecurity.com · medium

ESET: SMBs face AI agent supply chain and prompt injection risks alongside accelerated phishing, exploitation and ransomware

ESET analysis describes a two-pronged risk for small and mid-size businesses (SMBs): AI agents create new paths into business systems, while attackers use AI to add speed and scale to established threats. Between March and May 2026, ESET scanned almost 900,000 unique agent skills from popular repositories and found more than 25,000 suspic…

welivesecurity.com · medium

Phishing evolves: QR codes, ConsentFix OAuth token theft, ClickFix variants and deepfake-enabled fraud defeat traditional red-flag training

ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…

welivesecurity.com · medium

Brand deal scam impersonating Hollyland, Nike and Spotify hijacks YouTube creators' Google accounts

A modular phishing campaign targets YouTube creators with personalized sponsorship offers from fake brand representatives. One variant impersonates Hollyland, a maker of wireless video transmission equipment, and also Nike and Spotify. Victims are led through a convincing fake collaboration platform to a bogus "Sign in with Google" page t…

welivesecurity.com · medium

Medicare Open Enrollment season (Oct 15 - Dec 7) drives scams harvesting health, insurance and financial data

Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower prem…

welivesecurity.com · medium

AI-powered OSINT lowers the barrier for mass victim profiling, making ordinary users viable fraud targets

ESET's WeLiveSecurity warns that AI and large language models (LLMs) now automate OSINT reconnaissance at machine speed. Profiling that once took a skilled attacker hours or days can be done by low-skill actors, so ordinary internet users are now economically viable fraud targets. Fraudsters can collect public information at scale, includ…