Hotel industry faces large-scale phishing attack
The hotel industry has been facing a major global advanced phishing attack since June. This is a two-step attack that uses vulnerabilities in DNS protocols.
According to researchers at Akamai, a large advanced phishing attack has been underway since June that specifically targets the hotel indus... Read more
QR code image-based phishing attacks on the rise
The number of image-based phishing attacks in which attackers manipulate QR code has increased significantly.
That's according to secure email provider Inky. According to researchers, with the rise of the QR code, the number of image-based phishing attacks has increased sharply, especially sinc... Read more
Google to start removing secure website indicators in Chrome
Google Chrome will soon replace its iconic lock symbol with a new icon. The company looks to represent a website's security level more accurately. The move could change how we understand website security.
The lock icon was first introduced to indicate that a website uses HTTPS encryption to secu... Read more
How effective are ChatGPT-generated phishing attacks?
While generative AI constantly improves, a Hoxhunt study found that humans are still the better option for delivering results. With over 53,000 email users in more than 100 countries analyzed, the study compared the win rate of simulated phishing attacks created by human social engineers and those ... Read more
Lampion malware makes comeback in a spate of WeTransfer phishing attacks
Lampion malware has been spreading in higher numbers as of late. Threat actors exploit WeTransfer as part of their phishing campaigns.
WeTransfer is a free, genuine file-sharing site. For some criminals, the solution provides a no-cost technique to get around security software that detects URLs ... Read more
Microsoft warns users of widespread redirection phishing attacks
Microsoft has warned users about a credential-phishing campaign it has been tracking. The campaign uses open redirector links that Microsoft says Defender can thwart.
The company said in a statement that attackers combine the links and social engineering ploys impersonating well-known productivi... Read more
Mimecast adds new AI tools to fight phishing attacks
Mimecast, the email security provider, launched an AI-powered add-on for Mimecast Secure Email Gateway (SEG), named Mimecast CyberGraph. The company said the tool detects sophisticated and sneaky phishing impersonation threats.
Mimecast CyberGraph deploys machine-learning technology to detect an... Read more