SMS Phishing Messages Target UAE Citizens, Visitors

December 21, 2023 at 10:24AM A malicious SMS campaign targeting citizens and visitors to the United Arab Emirates is run by the Smishing Triad Gang, impersonating official authorities to collect personal and credit card details. The campaign uses URL-shortening tools to disguise links and is believed to have access to private channels for obtaining information. … Read more

WordPress hosting service Kinsta targeted by Google phishing ads

December 17, 2023 at 06:46PM WordPress hosting provider Kinsta warns of Google ads promoting phishing sites to steal hosting credentials for MyKinsta. The attackers target Kinsta visitors using sponsored websites mimicking Kinsta’s, urging users to stay cautious. Kinsta urges enabling two-factor authentication and warns of potential phishing emails. They recommend direct access to MyKinsta and … Read more

Fake WordPress security advisory pushes backdoor plugin

December 4, 2023 at 12:19PM WordPress security experts are warning of phishing emails with fake security advisories asking admins to install a malicious plugin, which creates a hidden user and downloads a backdoor to the site, potentially for injecting ads, stealing data, or blackmail. Users are urged to be cautious. **Key Takeaways from Meeting Notes … Read more

Rogue ex-Motorola techie admits cyberattack on former employer, passport fraud

November 29, 2023 at 08:23PM Andrew Mahn, ex-Motorola technician, pleaded guilty to passport and wire fraud after launching a cyberattack on the company and attempting to acquire a passport with false credentials while pending trial. Mahn stole Motorola data, including code to unlock radio features, using employee credentials obtained via phishing. Sentencing is set for … Read more

Fraud researchers impersonated on X to push crypto-stealing sites

November 15, 2023 at 10:04AM Multiple fake accounts on X (former Twitter) are promoting phishing pages to drain cryptocurrency wallets. The scammers impersonate accounts belonging to cryptocurrency experts and security firms to spread fabricated security breach claims. Users are advised to be cautious, verify claims from official sources, and avoid connecting wallets to suspicious platforms. … Read more