Social Engineering

Cyber Threat Intel 5 min A Google Ad for ChatGPT Led to a Real chatgpt.com Page That Installed a Trojan Attackers published a Custom GPT called "Plus 5.6" that sent every visitor to a fake backup site. OpenAI took... PR Priya Nair 1 Oct Cyber Threat Intel 6 min Berlin's Second Leak Is Credentials, and the Way In Was a Fake CAPTCHA Login details went up over the weekend and the state will not say whether they still work. Researchers trace t... PR Priya Nair 14 Sep Privacy & Data 6 min Nobody Broke Into Revolut. Someone Asked, From a Government Domain. Passports, verification selfies and full transaction histories went out through the channel that answers offic... PR Priya Nair 14 Sep Cybersecurity 7 min TerminalFix Hides Malware in PNGs. It Still Needs You to Paste the Command. An executable in one image and a DLL split across two more. Every clever stage is post-compromise; the entry p... PR Priya Nair 1 Sep Cybersecurity 7 min An AI Calls Stolen iPhone Owners as Apple Support and Asks for the Passcode The number the thief calls is the one the owner entered into Lost Mode so an honest finder could return the ph... KE Kenji Tanaka 31 Aug Cyber Threat Intel 8 min Ransomware Went After the 46-Year-Old Manager, Not the Administrator Zscaler tracked 351 victims across 334 organisations in one campaign. Sixty-two per cent were managers or abov... CY Cyber Team 10 Aug Cybersecurity 5 min Taiwan Charges Two Executives Over a LINE-Account Leasing Scheme Prosecutors Link to Chinese Cyber-Espionage Taiwanese investigators have issued deferred prosecution orders against two executives who, prosecutors allege... CY Cyber Team 20 Jul Cybersecurity 6 min £29 Million of Damage From a Phone Call: Two Scattered Spider Members Jailed Over the TfL Hack Two Scattered Spider members were sentenced to five and a half years each on 16 July for the 2024 Transport fo... CY Cyber Team 20 Jul Cybersecurity 3 min The breaches confirmed this week needed no zero-day. The perimeter is identity now. Two large companies confirmed this week that social-engineering attacks took millions of customer records, and... JE Jeffrey Tan 2 Jun Cybersecurity 7 min No Zero-Day Required: Charter and Carnival Confirm Breaches as ShinyHunters Claims Both Charter and Carnival confirmed breaches days apart, and ShinyHunters claims both. Carnival is notifying nearly... CY Cyber Team 2 Jun Cybersecurity 5 min AI Is Making Phishing Emails Harder to Tell Apart From Legitimate Ones Large language models let attackers write fluent, personalised phishing at scale. Here is what employees and b... CY Cyber Team 5 May