/
ttps_attack:T1566 × victim_sectors:consumers × limpar

Resultados

6 casos · pág. 1/1

welivesecurity.com · low

US breach notices increasingly omit attack details; ITRC data shows only 24% disclose the attack vector in H1 2026

Publicly reported data breaches in the US reached an all-time high last year, with over 3,300 incidents and nearly 280 million victim notices. The Identity Theft Resource Center (ITRC) reports that over 471 million notices went out in the first half of 2026, but only 24% described the attack vector, the lowest rate it has recorded. The ar…

gbhackers.com · medium

Scammers abuse legitimate Dell and Staples order emails to deliver callback phishing lures that pass DKIM and DMARC

Cisco Talos observed roughly 1,400 messages across two callback phishing campaigns that abuse legitimate Dell and Staples order notification pipelines. The attackers inject fraudulent helpline numbers into fields the retailer platforms render in authenticated transactional emails, so the messages pass authentication without spoofed sender…

olhardigital.com.br · low

Quishing in Brazil: Fraudsters Swap Payment QR Codes on Websites, Stickers and Printed Boletos to Divert Funds

Brazilian outlet Olhar Digital describes a quishing fraud pattern in which criminals create or tamper with payment QR Codes so that victims' money goes to accounts the fraudsters control. The scheme appears in online shopping, in physical venues such as bars, restaurants, street markets and car parks, and in printed boletos. The Federação…

welivesecurity.com · low

FTC weighs rules on impersonation scam ads as social media scam advertising scales across Europe and the US

The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …

welivesecurity.com · medium

Medicare Open Enrollment season (Oct 15 - Dec 7) drives scams harvesting health, insurance and financial data

Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower prem…

infosecurity-magazine.com · · 3 fontes · 3 atualizações medium

European Commission opens DSA investigation into Booking.com over fake listings, phishing/smishing scams and weak fraud defenses

The European Commission opened formal proceedings on 2026-10-21 under the Digital Services Act (DSA) against Booking.com, a very large online platform with more than 45 million EU users (theregister.com, olhardigital.com.br, infosecurity-magazine.com). The probe examines whether the company does enough to stop fraudsters from using the pl…