Browsing tag

social engineering

Bogus npm Packages Used to Trick Software Developers into Installing Malware

An ongoing social engineering campaign is targeting software developers with bogus npm packages under the guise of a job interview to trick them into downloading a Python backdoor. Cybersecurity firm Securonix is tracking the activity under the name DEV#POPPER, linking it to North Korean threat actors. “During these fraudulent interviews, the developers are often asked […]

Russian-Linked Hackers Target 80+ Organizations via Roundcube Flaws

Threat actors operating with interests aligned to Belarus and Russia have been linked to a new cyber espionage campaign that likely exploited cross-site scripting (XSS) vulnerabilities in Roundcube webmail servers to target over 80 organizations. These entities are primarily located in Georgia, Poland, and Ukraine, according to Recorded Future, which attributed the intrusion set to […]

Coinbase Employee Falls for SMS Scam in Cyber Attack, Limited Data Exposed

Popular cryptocurrency exchange platform Coinbase disclosed that it experienced a cybersecurity attack that targeted its employees. The company said its “cyber controls prevented the attacker from gaining direct system access and prevented any loss of funds or compromise of customer information.” The incident, which took place on February 5, 2023, resulted in the exposure of […]

Hamas-linked Hackers Targeting High-Ranking Israelis Using ‘Catfish’ Lures

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an “elaborate campaign” targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations. “The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and Android devices,” cybersecurity company […]

How Can Social Engineering Alter the Insider Threat Game?

Social engineering attacks are not becoming common against corporate organizations and SMBs but are also getting increasingly advanced. With hackers adopting smarter methods for trapping employees and individuals into giving up their valuable data, enterprises must use considerable efforts to stay two steps forward of the cybercriminals. These attacks usually involve some psychological manipulation to […]

99% Email Attacks Require Human Interaction: Security Researchers

Email-based cyber attacks have become common these days. I am not the only one receiving emails saying that the file in the attachment contains data that I might be interested in knowing. Social engineering has become one of the major tools attackers use to lure targets into opening links or attachments. A report by Proofpoint […]

Scammers Use AI To Fake CEO’s Voice, Transfer $243,000

We all know how AI has advanced over the years and is continuing to do so for a better future. While AI helps us in numerous ways, it also contributes to malicious activities as suggested by a new cybercriminal case. AI used in money fraud As hinted by a report by the Wall Street Journal, […]

Flaw in NSA’s GHIDRA leads to remote code execution attacks

GHIDRA is NSA’s reverse engineering tool released earlier this month. Earlier this month, Hackread.com posted about the National Security Agency’s (NSA) publicly releasing its decompiler and disassembler tool GHIDRA and make it open-source software. Now, it has been revealed that the generic reverse engineering tool has a flaw that can be exploited by cybercriminals for carrying […]

Track people on internet – Trape demo tutorial

Trape Intro:- Trape is a OSINT (Open Source Intelligence Tool) is a tracking tool  in which you can execute social engineering attack in a real time, ethical hacking specialists clarifies. It was created with the goal of to tell the world that how an attacker can obtain confidential info such as victim location beyond their IP […]

Hackers Launching GandCrab Ransomware via New Fallout Exploit Kit using Malvertising Campaign

Cybercriminals now using new Fallout Exploit Kit for launching GandCrab Ransomware via Malvertising Campaign that targets many victims around the world. This malvertising campaign mainly affected users in  Japan, Korea, the Middle East, Southern Europe, Asia Pacific region and other countries. Along with this Exploit kit, there are additional domains, regions, and payloads associated with the campaign […]

Netflix Email Scam Hits Millions Of Binge Watchers — Here’s How To Spot It

Your Netflix account will be suspended if you don’t update your billing information, says a personalized email from Netflix, which is a phishing attack. However, this is different from the one that targeted Netflix users earlier this year. The wholesale phishing spree was discovered by an Australian security firm called Mailguard last week, Deadline reports. […]

How to hack using Social Engineering

What do you mean by social engineering? Social engineering is the art of manipulating users of a computing system into revealing confidential information.  The term can also include activities such as exploiting human kindness, greed and curiosity. To gain access to restricted access buildings or getting the users to installing backdoor software.   HERE,   […]

Overview of Social Engineering

“In the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information.” A type of confidence trick for the purpose of information gathering, fraud, or system access, it differs from a traditional “con” in that it is often one of many steps in a more complex fraud scheme. […]