Now BlueSky hit with crypto scams as it crosses 20 million users

November 21, 2024 at 05:32AM As BlueSky surpasses 20 million users, cryptocurrency scams are emerging, similar to those on X/Twitter. Threat actors are using misleading posts with AI-generated images and impersonating Meta branding. BlueSky’s decentralized nature complicates moderation, leading to a surge in reports of spam and scams, highlighting significant operational challenges. **Meeting Takeaways: BlueSky … Read more

Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes

November 14, 2024 at 09:58AM Google has reported increasing scams where fraudsters use landing page cloaking to impersonate legitimate sites, manipulating users into purchasing counterfeit products. Techniques include AI-generated deepfakes and cloning legitimate apps. Google has taken action by blocking billions of scam ads and enhancing user protection through new detection features in Android apps. … Read more

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

October 28, 2024 at 07:26AM Cybersecurity researchers warn of a rise in phishing attacks utilizing Webflow, targeting sensitive crypto wallet information and webmail credentials. Over 120 organizations, primarily in North America and Asia, are affected. Attackers exploit legitimate services to create deceptive phishing pages, increasing their success in stealing user credentials. ### Meeting Takeaways 1. … Read more

US indicts two over socially engineered $230M+ crypto heist

September 20, 2024 at 01:34PM Malone Lam, 20, and Jeandiel Serrano, 21, are facing serious charges for allegedly stealing over $230 million in cryptocurrency. The pair is accused of carrying out a scam, using the stolen funds to buy luxury items and travel services. The case, handled by the US Attorney’s Office, FBI, and IRS, … Read more

North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

September 4, 2024 at 09:23PM The FBI warned of North Korean operatives planning intricate social engineering attacks on DeFi organization employees to steal cryptocurrency. The scammers use sophisticated tactics and target cryptocurrency-related businesses. North Korea’s efforts to obtain digital assets have become more refined, posing cybersecurity risks. The FBI also provided indicators of potential scam … Read more

Indian Government Rescues 250 Citizens Forced into Cybercrime in Cambodia

April 1, 2024 at 10:33AM Indian government rescued and repatriated 250 citizens from Cambodia who were coerced into cyber scams. This follows reports of over 5,000 Indians forced into “cyber slavery.” Similar efforts to free victims in China and the Philippines have been undertaken. Criminals run pig butchering scams, gaining trust under the guise of … Read more

Trend Micro Defends FIFA World Cup from Cyber Threats

January 12, 2024 at 12:11AM Trend Micro collaborated with INTERPOL to defend the FIFA World Cup, monitoring and reporting on potential cyber threats. They proactively identified and shared detections of malicious websites and scams, such as fake ticket sales, streaming sites, survey scams, and crypto scamming. Trend Micro aims to continue making the digital world … Read more

Mandiant’s brute-forced X account exposes perils of skimping on 2FA

January 11, 2024 at 12:35PM Mandiant’s investigation of the takeover of its X account revealed a successful brute-force attack due to a change in two-factor authentication policy. The use of SMS-based 2FA was removed, leaving accounts vulnerable. The compromise led to a scam pushing CLICKSINK drainer-as-a-service, highlighting the rise of such attacks targeting valuable cryptocurrency … Read more

Mandiant’s X Account Was Hacked Using Brute-Force Attack

January 11, 2024 at 04:01AM Mandiant’s X account was compromised by a brute-force attack, enabling the intruder to spread a cryptocurrency drainer called CLINKSINK. The attack targeted Solana cryptocurrency users and utilized phishing pages to redirect victims to approve fraudulent transactions. This incident reflects a growing trend of financially motivated threat actors targeting cryptocurrency assets … Read more

US SEC’s X account hacked to announce fake Bitcoin ETF approval

January 9, 2024 at 05:31PM The U.S. Securities and Exchange Commission’s account, X, was hacked to falsely announce the approval of Bitcoin ETFs. The tweet, promptly deleted, led to a temporary spike in Bitcoin prices. However, the SEC clarified that no such approval had been granted. This incident follows a string of account breaches targeting … Read more