Naked Security
4 years, 2 months ago
S3 Ep80: Ransomware news, phishing woes, NAS bugs, and a giant hole in Java [Podcast]
Latest episode - listen now!
Security news aggregator
Latest coverage for Phishing
Phishing uses deceptive messages to steal credentials or deliver malware, while user verification, MFA, and email filtering reduce the risk.
7
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Phishing is deceptive communication—by email, text, phone, or a fake website—that impersonates a trusted person or service to make someone disclose credentials, approve a transaction, reveal sensitive information, or run harmful software. Attackers use it to bypass technical controls by persuading a legitimate user to perform an action, and may target employees, customers, administrators, or suppliers.
Its impact can include account takeover, unauthorized payments, exposure of personal or business data, and access to internal systems. The most effective control for stolen-password phishing is phishing-resistant multi-factor authentication, such as hardware-backed passkeys or security keys, which binds authentication to the legitimate site. Organizations should also filter and authenticate messaging where possible, use password managers, restrict risky actions, train users to verify unusual requests through a separate channel, and provide rapid reporting so suspected credentials or sessions can be revoked.
Showing 7 most recent headlines
Filtered view
Bleeping Computer
4 years, 2 months ago
Russian govt impersonators target telcos in phishing attacks
A previously unknown and financially motivated hacking group is impersonating a Russian agency in a phishing campaign targeting entities in Eastern European countries. [...]
Bleeping Computer
4 years, 2 months ago
Chinese state-backed hackers now target Russian state officers
Security researchers analyzing a phishing campaign targeting Russian officials found evidence that points to the China-based threat actor tracked as Mustang Panda (also known as HoneyMyte and Bronze President). [...]
The Hacker News
4 years, 2 months ago
North Korean Hackers Target Journalists with GOLDBACKDOOR Malware
A state-backed threat actor with ties to the Democratic People's Republic of Korea (DRPK) has been attributed to a spear-phishing campaign targeting journalists covering the country with the ultimate goal of deploying a backdoor on infected Windows systems
Dark Reading
4 years, 2 months ago
North Korean State Actors Deploying Novel Malware to Spy on Journalists
Spear-phishing campaign loaded with new "Goldbackdoor" malware targeted journalists with NK News, analysts found.
Bleeping Computer
4 years, 2 months ago
Emotet malware infects users again after fixing broken installer
The Emotet malware phishing campaign is up and running again after the threat actors fixed a bug preventing people from becoming infected when they opened malicious email attachments. [...]
Naked Security
4 years, 2 months ago
Phishing goes KISS: Don’t let plain and simple messages catch you out!
Sometimes we receive phishing tricks that we grudgingly have to admit are better than average, just because they're uncomplicated.