Scammers are exploiting tax season panic with convincing new email traps
"Surely the IRS can't ask for my credit card details?"
Troy Hunt, security expert and creator of HaveIBeenPwned, falls victim to phishing scam
It can happen to the best of us
FBI issues new alert over phishing SMS scam about unpaid road tolls
If they're asking for money, it's probably a "smishing" scam
FBI alerts tech companies of forged subpoenas used by data-stealing hackers
Cybercriminals are leveraging fake law enforcement requests to access user data
Novel phishing attack uses "no-escape" kiosk mode in Chrome to extract passwords
The quick fix is Control-Alt-Delete
Microsoft ignored months-old security bug in Outlook that allowed email spoofing
So much for putting "security first"
Google Chrome gets real-time phishing and malware protection with upgraded Safe Browsing feature
It will be available on all desktop and mobile platforms by the end of this month
Google's new spam rules pushes mass email senders to include an unsubscribe button
There are also new rules regarding authentication and spam limits
Cybercriminals are circumventing email security with image-based scams
Malicious emails contain no HTML text, are pulling off phishing through QR codes
Meta is suing Freenom, cybercriminals' favorite domain registrar
The TLD service provider is not accepting free domain registrations anymore
Bitdefender defeats Mortal Kombat ransomware with free decryptor
Unencrypt your files silently, with additional arguments and commands for automation
Hackers hit US Windows systems with "Mortal Kombat" ransomware
Scorpion says: "Get over here!" Watch out for emails from the crypto exchange CoinPayments. Hackers are running a new "Mortal Kombat" ransomware campaign. The attackers disguise the phishing email attachment to look like payment transactions. However, when opened, the payload automatically downloads either ransomware or a crypto-wallet skimmer. So it's a bit like a one-two uppercut. TOASTY!
Reddit recommends users set up 2FA following confirmed data breach
Reddit sources say no user data was compromised in the attack
Hackers used legitimate remote help-desk tools to scam multiple US federal agencies
Widespread campaign tricked federal employees into "refunding" bad actors fake charges
Beware of fake MSI Afterburner that installs cryptojacking and information-stealing malware
The overclocking tool's popularity is being exploited again
Cybercriminals are taking advantage of Twitter verification revamp
Don't fall for that phishing email
Windows 11 22H2 update includes enhanced phishing protection
How to activate it on private systems and professional networks
Steam users warned of sophisticated browser-in-the-browser phishing attack
A lot more convincing than a phishing email
In brief: Steam users are being warned about a new attack tricking people into handing over their account credentials via a browser-in-the-browser phishing technique. Competitive and professional gamers are being targeted, as is anyone with a high-value account.
Beware of this very convincing PayPal phishing scam
It lacks the usual tell-tale scam signs
Hackers target unsecured Amex and Snapchat sites to steal user data
The new attack uses a not-so-new vulnerability that redirects users to fraudulent sites
Hackers are turning to Discord and Twitter for their phishing scams
No, that's not me in the photo
FBI claims VPN credentials of US universities are being sold on Russian cybercrime forums
For thousands of dollars, no less
Study claims up to 75 percent of phishing websites make it past Chrome's defenses
Google calls BS, saying its blocking API is shared with Firefox, which blocked 85 percent
FBI warns workers to beware of BEC scams that have stolen $43 billion in five years
Criminals love more than just ransomware
Bored Ape Yacht Club hack sees millions of dollars worth of NFTs stolen
Another day, another NFT hack