Okla.Social

12 posts11 participants0 posts today

securityskeptic :donor: :verified:Our latest quarterly phishing activity reports are available at the Cybercrime Information Center.For the TL;DR; folks... Phishers were busy during the holidays.Phishing Activity: November 2024 - 31 January 2025 <a href="https://interisle.substack.com/p/phishing-activity-november-2024-31" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://interisle.substack.com/p/phishing-activity-november-2024-31</a><a href="https://infosec.exchange/tags/dnsabuse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnsabuse</a> <a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a>

CybernewsBabuk ransomware, a cybercrime ring that targets major enterprises, has posted unverified claims about a massive data breach at Orange.<a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> <a href="https://infosec.exchange/tags/Orange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Orange</a> <a href="https://infosec.exchange/tags/databreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#databreach</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://cnews.link/hackers-threaten-release-of-orange-clients-data-3/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cnews.link/hackers-threaten-release-of-orange-clients-data-3/</a>

Andrew 🌻 Brandt 🐇I am proud to announce that I have been invited to join the board of World Cyber Health, the parent organization of the <a href="https://infosec.exchange/tags/MalwareVillage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MalwareVillage</a> (proposed at <a href="https://infosec.exchange/tags/DEFCON" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DEFCON</a> 33, coming soon to a <a href="https://infosec.exchange/tags/BSides" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BSides</a> or other conferences near you). Malware Village will host talks, contests, and workshops to educate and encourage more people to join the malware analysis field.I continue to work to support those inside and outside the cybersecurity community with a spinoff WCH project called NO HAVOC (<a href="https://no-havoc.org/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://no-havoc.org/</a>), a cybersecurity "911" service where cybercrime victims can be directed to support services in their region of the world. We are here to rescue us. Nobody else is going to save us.<a href="https://infosec.exchange/tags/MutualAid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MutualAid</a> <a href="https://infosec.exchange/tags/WorldCyberHealth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WorldCyberHealth</a> <a href="https://infosec.exchange/tags/WCH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WCH</a> <a href="https://infosec.exchange/tags/MalwareVillage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MalwareVillage</a> <a href="https://infosec.exchange/tags/DEFCON" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DEFCON</a> <a href="https://infosec.exchange/tags/DEFCON33" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DEFCON33</a> <a href="https://infosec.exchange/tags/BSides" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BSides</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://infosec.exchange/tags/training" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#training</a> <a href="https://infosec.exchange/tags/education" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#education</a> <a href="https://infosec.exchange/tags/CyberCrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCrime</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

The DefendOps DiariesThe Evolving Threat of Phishing Scams: A Case Study on Coinbase Users<a href="https://thedefendopsdiaries.com/the-evolving-threat-of-phishing-scams-a-case-study-on-coinbase-users/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thedefendopsdiaries.com/the-evolving-threat-of-phishing-scams-a-case-study-on-coinbase-users/</a><a href="https://infosec.exchange/tags/phishingscams" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishingscams</a> <a href="https://infosec.exchange/tags/coinbase" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#coinbase</a> <a href="https://infosec.exchange/tags/cryptosecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptosecurity</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/socialengineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#socialengineering</a>

Kevin Karhan :verified:Yikes the <a href="https://infosec.space/tags/NCA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NCA</a> is really <a href="https://infosec.space/tags/cringe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cringe</a> af!<a href="https://www.youtube.com/watch?v=Bi11B4xtHSY&t=211s" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.youtube.com/watch?v=Bi11B4xtHSY&t=211s</a><a href="https://infosec.space/tags/Police" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Police</a> <a href="https://infosec.space/tags/UK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UK</a> <a href="https://infosec.space/tags/Copaganda" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Copaganda</a> <a href="https://infosec.space/tags/CyberCrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCrime</a>

securityskeptic :donor: :verified:Interisle posts quarterly phishing, spam, and malware activity reports at the Cybercrime Information Center (<a href="https://cybercrimeinfocenter.org/phishing-activity" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cybercrimeinfocenter.org/phishing-activity</a>).Monthly activity briefs for these cybercrimes will now be shared via Interisle.substack.com. Cybercrime Report: January 2025 <a href="https://interisle.substack.com/p/cybercrime-report-january-2025" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://interisle.substack.com/p/cybercrime-report-january-2025</a><a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/dnsabuse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnsabuse</a> <a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a>

The DefendOps DiariesInternational Cooperation in Combating Cybercrime: The Extradition of Rostislav Panev<a href="https://thedefendopsdiaries.com/international-cooperation-in-combating-cybercrime-the-extradition-of-rostislav-panev/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thedefendopsdiaries.com/international-cooperation-in-combating-cybercrime-the-extradition-of-rostislav-panev/</a><a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/internationalcooperation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#internationalcooperation</a> <a href="https://infosec.exchange/tags/lockbitransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lockbitransomware</a> <a href="https://infosec.exchange/tags/extradition" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#extradition</a> <a href="https://infosec.exchange/tags/cybersecuritynews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecuritynews</a>

0x40kUgh, that dreaded download button is back! 😈 Cracked software can seem tempting at first, right? But honestly, more often than not, it brings a whole lot more trouble than it's worth. This MassJacker thing is just outrageous. It snatches your crypto address straight from your clipboard – poof, money gone! 💸Being a pentester, I gotta say: be super careful about where you're getting your software (or *not* getting it, if you catch my drift 😉). It's definitely better to go the legal and secure route, rather than ending up broke and on the wrong side of the law. Make sure you check your hashes, scan those downloads, and keep your antivirus software updated. And most importantly, don't forget to use your common sense! 🤔What are some of your craziest download fail stories? Spill the beans! 👇 <a href="https://infosec.exchange/tags/SecurityAwareness" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAwareness</a> <a href="https://infosec.exchange/tags/Pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pentesting</a> <a href="https://infosec.exchange/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybercrime</a>

Infoblox Threat IntelThreat actors often have their favorite TLDs. This month we've found the following TLDs to have the highest risk. The top 5 retain their spot from last month, with the TLD .bond topping the chart with a risk score of 10. This is rare and only happens when the percentage of risky domains is at least 4.5 standard deviations above the mean. Congratulations, I guess?An explanation and minimum-working-example of our reputation algorithm can be found here: <a href="https://blogs.infoblox.com/threat-intelligence/reliable-reputation-scoring/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blogs.infoblox.com/threat-intelligence/reliable-reputation-scoring/</a><a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatintel</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/threatintelligence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatintelligence</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infoblox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infoblox</a> <a href="https://infosec.exchange/tags/infobloxthreatintel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infobloxthreatintel</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

securityskeptic :donor: :verified:In anticipation of the completion of ICANN policy activity for the New gTLD Program: Next Round, the Interisle team looked again at our 2024 Cybercrime Supply Chain study. Using the same data, we offer additional measurements, metrics and observations here to further inform ICANN and other policy makers as they consider policy for Round 2.<a href="https://interisle.substack.com/p/icann-consider-cybercrime-data-before" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://interisle.substack.com/p/icann-consider-cybercrime-data-before</a><a href="https://infosec.exchange/tags/icann" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#icann</a> <a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://infosec.exchange/tags/domainnames" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#domainnames</a> <a href="https://infosec.exchange/tags/TLD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLD</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a>

Erik van Straten<a href="https://mastodon.nl/@ErikSchouten73" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ErikSchouten73</a> : zie ook <a href="https://www.security.nl/posting/879497/Logius+waarschuwt+voor+malafide+brieven+over+activeren+van+DigiD" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.security.nl/posting/879497/Logius+waarschuwt+voor+malafide+brieven+over+activeren+van+DigiD</a>.Daaronder (in <a href="https://security.nl/posting/879531" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://security.nl/posting/879531</a>) geef ik voorbeelden van websitenamen (ook bekend als domeinnamen) van criminele websites die op slechts één Russische server draaien. Een screenshot van de tabel met die namen ziet u hieronder.Het is een schandaal dat niemand hier iets tegen onderneemt, en dat criminelen probleemloos websites met dit soort (duidelijk misleidende) domeinnamen kunnen registreren. Erger is dat zij hier, bij herhaling en voor een duidelijk criminele server, website-certificaten voor kunnen verkrijgen.Een grof schandaal daarbij is het dat de makers van (vooral mobiele) browsers u de mogelijkheid hebben ontnomen om certificaten überhaupt in hun geheel te bekijken (*), zodat u kunt zien of het om een anoniem (Domain Validated) certificaat gaat, of om eentje waarbij de identiteit van de verantwoordelijke voor de website is vastgesteld (dat hoeft niets te zeggen over de betrouwbaarheid van de website, maar u weet dan wel bij wie u verhaal kunt halen als u bedonderd wordt, en *dát* is voor veel website-verantwoordelijken een drijfveer om wél eerlijk te zijn).(*) Dat is om de winsten van Big Tech te maximaliseren. Als mensen verschillen tussen authentieke (echte) en grotendeels anonieme (low cost) flutwebsites zouden zien, zouden flutwebsites veel minder worden bezocht, en dan zou Big Tech minder verdienen aan goedkope hosting en het verhuren van domeinnamen. Helaas: als je anonieme flutwebsites toestaat, maken cybercriminelen daar handig misbruik van.In de tabel hieronder, per regel, van links naar rechts: • Datum waarop de domeinnaam naar 193.143.1.14 verwees (notatie: jjmmdd);• Aantal (van 94) virus/malwarescanners dat op 11 maart kwaad in de domeinnaam (per nepsite wijzigt dit aantal soms per dag; het duurt vaak dagen en soms weken voordat het maximale aantal virusscanners kwaad ziet in een website, en om hun lijst met foute sites niet eindeloos te laten groeien worden wat oudere foute sites snel geschrapt);• De domeinnaam zelf (ik heb steeds ".com" vervangen door "·com", met een hoger liggende punt, om onbedoeld openen te voorkómen).<a href="https://infosec.exchange/tags/Phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Phishing</a> <a href="https://infosec.exchange/tags/Identiteitsfraude" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Identiteitsfraude</a> <a href="https://infosec.exchange/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybercrime</a> <a href="https://infosec.exchange/tags/Impersonatie" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Impersonatie</a> <a href="https://infosec.exchange/tags/OnlineOplichting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OnlineOplichting</a> <a href="https://infosec.exchange/tags/Oplichting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Oplichting</a> <a href="https://infosec.exchange/tags/NepNietVanEchtKunnenOnderscheiden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NepNietVanEchtKunnenOnderscheiden</a> <a href="https://infosec.exchange/tags/EchtNietVanNepKunnenOnderscheiden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EchtNietVanNepKunnenOnderscheiden</a>

CybernewsA Chinese cyberespionage group is targeting Juniper routers with custom backdoors for outdated hardware.<a href="https://infosec.exchange/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#China</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/cyberattack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyberattack</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/hardware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hardware</a> <a href="https://cnews.link/juniper-routers-attacked-with-tinyshell-malware-1/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cnews.link/juniper-routers-attacked-with-tinyshell-malware-1/</a>

Scott WilsonWow, just got a super-shady Smishing message on my phone supposedly from "NC Quick Pass". Disclosure - I'm an NC Quick Pass customer, but this wasn't them. Apparently, someone is registering malicious Domains for this campaign like crazy just today! See screenshots for more details.If you receive a text or email like this, report it to Internet Crime Complaint Center (<a href="https://www.ic3.gov/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.ic3.gov/</a>). IoCs: ncquickpass.com-rziu.xin 43.130.29.103 04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747 7808605ddd1f0eaa454aa444293d2f0260943e51e53838fca46506e6a69fe521 e4222715b556e7d99622c83e620d2f8e090047e56adb07923047f95828d561f2<a href="https://infosec.exchange/tags/smishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#smishing</a> <a href="https://infosec.exchange/tags/scams" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scams</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/spam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spam</a> <a href="https://infosec.exchange/tags/ic3" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ic3</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a>

CybernewsCl0p ransomware claims to have leaked Rackspace Technology files Monday.<a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/US" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#US</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://cnews.link/rackspace-files-published-cl0p-ransomware-cleo-attacks-1/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cnews.link/rackspace-files-published-cl0p-ransomware-cleo-attacks-1/</a>

The DefendOps DiariesThe Impact of AI on Cybercrime: Navigating the Dark Web<a href="https://thedefendopsdiaries.com/the-impact-of-ai-on-cybercrime-navigating-the-dark-web/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thedefendopsdiaries.com/the-impact-of-ai-on-cybercrime-navigating-the-dark-web/</a><a href="https://infosec.exchange/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/darkweb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#darkweb</a> <a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a>

securityskeptic :donor: :verified:Have you received an email or text about unpaid tolls? Interisle's Colin Strutt digs through our cybercrime data to see how domains used in these attacks are composed and who's behind them. <a href="https://interisle.substack.com/p/unpaid-toll-scams-continue-in-2025?r=59cehk" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://interisle.substack.com/p/unpaid-toll-scams-continue-in-2025?r=59cehk</a><a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> <a href="https://infosec.exchange/tags/scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scam</a> <a href="https://infosec.exchange/tags/unpaidtollscam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unpaidtollscam</a> <a href="https://infosec.exchange/tags/smishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#smishing</a> <a href="https://infosec.exchange/tags/spam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spam</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a>

Cyber Jobs<a href="https://www.cybersecurityjobsguide.com/booking-com-security-lapses/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.cybersecurityjobsguide.com/booking-com-security-lapses/</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/travel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#travel</a> scams

Infoblox Threat IntelWe're currently tracking crypto, recruitment, and task scams that all share the same site structure, keeping their template designers busy 24/7, and appearing on thousands of fresh domains daily. While you may be familiar with their modus operandi, please take a moment to inform your less security-savvy friends and family with the warning signs: - Distributed via unsolicited job offers (more on this topic soon) and 'make money online' social media groups—sometimes even shared by other victims, including people you know, in the hope of increasing their earnings via referral bonuses. - Promise high returns with seemingly little to no effort or risk, almost certainly too good to be true. - Often abuse well-known brands to appear legitimate, with recent campaigns mimicking Adidas, Lidl and Macy's, among others. - Start with requests for small payments that increase as the perceived earnings grow, with most transactions using the cryptocurrency Tether (USDT), a stablecoin linked to the US dollar. - Scam domains are sometimes lookalikes, mimicking the legitimate brand, combined with numbers or generic terms like 'invest' or 'vip'. Scammers typically create a sense of urgency and pressure victims into acting quickly without thinking. Many will fall into the sunk cost fallacy, being made to feel that investing one more time will allow them to get their promised reward. The outcome can be devastating, with victims often reported as losing their life savings, racking up debts, and even unwittingly convincing other family members to participate in the scam. Recently observed examples of these shared structure investment scams have used lookalike domains registered through Alibaba and protected by Cloudflare: - `adidaso[.]top` - `macys[.]name` - `lidl02-vip[.]com`<a href="https://infosec.exchange/tags/scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scam</a> <a href="https://infosec.exchange/tags/investment" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#investment</a> <a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatintel</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/infoblox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infoblox</a> <a href="https://infosec.exchange/tags/infobloxthreatintel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infobloxthreatintel</a>

CybernewsCybercriminals started to exploit Trump's cryptocurrency to take over user devices in just two minutes.<a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/Trump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Trump</a> <a href="https://infosec.exchange/tags/crypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#crypto</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://cnews.link/trump-coin-scam-malware-1/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cnews.link/trump-coin-scam-malware-1/</a>

Peter N. M. HansteenThe .cn domain name scams are *stilll* live and well - the article <a href="https://nxdomain.no/~peter/domain_name_scams_are_alive_and_well_thank_you.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nxdomain.no/~peter/domain_name_scams_are_alive_and_well_thank_you.html</a> updated with the latest scammer email data. <a href="https://mastodon.social/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://mastodon.social/tags/scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scam</a> <a href="https://mastodon.social/tags/domainnamescam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#domainnamescam</a> <a href="https://mastodon.social/tags/cndomains" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cndomains</a> <a href="https://mastodon.social/tags/netprovider" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#netprovider</a>.com.cn <a href="https://mastodon.social/tags/spam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spam</a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a>

Recent searches

Search options

Administered by:

Server stats:

#cybercrime