credential stealing
Jailbroken Gemini AI Model Supercharged Russian-Speaker’s Fraud Campaign
Jeffrey Burt | | ai llm jailbreak, API Keys, credential stealing, crypto fraud, Google Gemini, MAGA, pump-and-dump, QAnon, RAT malware, Trend Micro
A solo Russian-speaking threat actor was able to scale his small five-year fraud operation aimed at MAGA and QAnon followers last year when he began using a jailbroken Google Gemini AI model ...
Security Boulevard
Russia’s Coldriver Ramps Up Malware Development After LostKeys Exposure
Google threat researchers in May publicized the Russian-based threat group Coldriver's LostKeys credential-stealing malware. However, five days later, the bad actors launched three new malware families that they developed rapidly and used ...
Security Boulevard
GoIssue – The Tool Behind Recent GitHub Phishing Attacks
Daniel Kelley | | bec, breaches, credential stealing, cyberluffy, Email Protection, GetHub, GitLoker, GoIssue, malware attacks, Phishing, Phishing Attacks, repository hijacking
By Daniel Kelley Security Researcher We recently uncovered GoIssue, a tool marketed on a cybercrime forum that allows attackers to extract email addresses from GitHub profiles and send bulk emails directly to ...
Unmasking the Sophisticated: How AI-Powered Defenses Thwart Advanced Phishing Attacks
Stephen Kowski | | breaches, Cloud Email Security, credential harvesting, credential stealing, CTO Corner, Email Protection, generative AI, Phishing, Phishing Attacks, social engineering attacks, threat detection
Attackers are constantly refining their techniques for advanced phishing attacks to exploit the trust inherent in our digital systems. A recent incident we’ve captured highlights the alarming sophistication of modern phishing attempts, ...
Unmasking the Sophisticated: How AI-Powered Defenses Thwart Advanced Phishing Attacks
Barry Strauss | | breaches, Cloud Email Security, credential harvesting, credential stealing, CTO Corner, Email Protection, generative AI, Phishing, Phishing Attacks, social engineering attacks, threat detection
Attackers are constantly refining their techniques for advanced phishing attacks to exploit the trust inherent in our digital systems. A recent incident we’ve captured highlights the alarming sophistication of modern phishing attempts, ...
New FishXProxy Phishing Kit Lowers Barriers for Cybercriminals
Stephen Kowski | | CloudFlare, credential stealing, cybercrime, data theft, financial breach, FishXProxy, Malicious Payloads, Phishing, phishing toolkit
Imagine receiving an email that looks perfectly legitimate, down to the last detail. This is the deceptive power of new FishXProxy Phishing Kit, a new phishing toolkit emerging from the cybercrime underground ...
New FishXProxy Phishing Kit Lowers Barriers for Cybercriminals
Barry Strauss | | CloudFlare, credential stealing, cybercrime, data theft, financial breach, FishXProxy, Malicious Payloads, Phishing, phishing toolkit
Imagine receiving an email that looks perfectly legitimate, down to the last detail. This is the deceptive power of new FishXProxy Phishing Kit, a new phishing toolkit emerging from the cybercrime underground ...
Understanding Credential Phishing
Jimmy Lin | SlashNext Threat Lab | | credential phishing, credential stealing, CTO Corner, Email Protection, Ransomware, UnitedHealth
Credential phishing is a type of cyberattack where attackers attempt to deceive your employees into providing their sensitive information, such as their Microsoft usernames and passwords. What is not obvious is credential ...
Massive ‘New’ Leaked Credentials List: Naz.API Pwns Troy
Richi Jennings | | authentication credentials, Compromised Credential, compromised credentials, compromised credentials monitoring, credential, Credential Compromise, credential database, Credential Dumping, credential harvesting, credential hijacking, credential loss, Credential Monitoring, credential stealing, credential stuffing, credential stuffing attack, Credential Stuffing Attacks, credentialstuffing, haveibeenpwned, HaveIBeenPwned.com, HIBPwned, info stealer, information stealer, infostealer, infostealers, malicious apps that steal passwords, Naz.API, password stuffing, SB Blogwatch, stuffingattacks, Troy Hunt
Have I been pwned? Yes, you probably have. Stop reusing passwords, already. Here’s what else you should do ...
Security Boulevard
Today’s cybersecurity health checks must identify AI based threats. Does yours?
Barry Strauss | | AI, artificial intellignece, bec, business email compromise, ChatGPT, credential stealing, Email Protection, FBI, generative AI, human, Malware, Microsoft Outlook, Mobile Phishing, observability, Phishing, smishing, SMS, social engineering, spear-phishing, Threat Intelligence, vishing
Your organization will most likely face AI based threats in cybersecurity at some point this year. And as such, you can’t rely on outdated risk assessment methodologies that struggle to keep pace ...

