Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
Researchers at AllSecure have uncovered a sophisticated phishing attempt by North Korean hackers from the Lazarus Group, targeting their CEO using a fake LinkedIn job interview. The attackers employed deepfake technology to create a convincing impersonation, aiming to extract sensitive information. This incident showcases the evolving tactics used by cybercriminals, particularly in social engineering, and highlights the risks that executives face in the digital age. With the rise of deepfake technology, companies need to be vigilant about potential impersonation scams that could compromise their security. This attack not only affects the targeted individual but also raises concerns for the entire organization and its stakeholders.
Ericsson US has confirmed a data breach resulting from an attack on a third-party service provider. This incident has put the personal information of an unknown number of employees and customers at risk. The company did not specify the exact details of the breach, such as how many individuals were affected or what specific types of data were compromised. This situation raises concerns about the security of third-party vendors, as they can often serve as weak links in a company's overall cybersecurity posture. Users and customers of Ericsson should be vigilant about potential phishing attempts or identity theft as a result of this breach.
The FBI has issued a warning about a new phishing scam targeting individuals and businesses applying for planning and zoning permits. Scammers are posing as city and county officials, using publicly available information to create convincing messages that trick applicants into providing sensitive information. This attack not only affects those seeking permits but also raises concerns about the security of public records and how easily they can be exploited. As more people engage with local government processes online, it's crucial for applicants to remain vigilant and verify the legitimacy of any communications they receive. This incident underscores the need for awareness around phishing tactics that exploit public data.
The FBI has issued a warning about a series of phishing attacks where criminals are posing as U.S. city and county officials. These attacks primarily target businesses and individuals seeking planning and zoning permits. Scammers use these impersonations to trick victims into providing sensitive information or money. This situation is concerning as it can lead to financial losses and undermine trust in local government processes. The FBI urges anyone involved in such applications to verify the legitimacy of communications before responding, especially if they involve requests for personal or financial information.
Recent reports indicate that attackers are misusing the .arpa top-level domain (TLD) to carry out phishing attacks. By exploiting DNS record management controls, these threat actors are able to obscure the actual location of their malicious content, often using services like Cloudflare to mask their activities. This tactic not only complicates detection but also poses a significant risk to users who may unwittingly engage with these phishing sites. As phishing continues to evolve, it is crucial for individuals and organizations to remain vigilant and update their security measures to counter such deceptive practices. The implications of these attacks are serious, as they can lead to data theft and financial loss.
A recent campaign called 'InstallFix' is targeting users through cloned websites that mimic legitimate AI tool installation pages. Attackers are replacing genuine commands with malicious ones, leading to the distribution of malware to unsuspecting users. This tactic poses a significant risk, especially for individuals seeking AI tools, as they may inadvertently download harmful software. Researchers have identified these cloned sites as a growing threat, urging users to be cautious when downloading software from unfamiliar sources. The implications are serious, as this can lead to compromised systems and data loss for both individual users and organizations.
Hackread – Cybersecurity News, Data Breaches, AI and More
The rise of remote work has brought about several hidden cybersecurity risks that can leave both businesses and employees exposed to potential breaches. Key issues include insecure home Wi-Fi networks, which can be easily compromised by attackers, as well as phishing attacks that target remote workers. Additionally, there is a risk of data exposure, particularly if employees are not following proper security protocols. These vulnerabilities can lead to significant consequences for organizations, including data loss and financial damage. It's essential for companies to address these risks by implementing better security measures and educating employees on safe remote work practices.
Europol, along with various cybersecurity vendors, has dismantled a phishing-as-a-service platform that was gaining traction among cybercriminals. This platform was particularly concerning because it allowed attackers to bypass multifactor authentication (MFA) measures, which are commonly used to protect online accounts. By circumventing these defenses, the platform made it easier for malicious actors to gain unauthorized access to sensitive information. The operation highlights the ongoing challenges in cybersecurity, especially as attackers continuously find ways to exploit weaknesses in security systems. Users and organizations need to stay vigilant and ensure their security measures are up to date to defend against such sophisticated phishing attempts.
Fintech company Figure has confirmed a data breach resulting from a phishing attack that targeted one of its employees. The attackers used social engineering tactics to deceive the employee and gain access to a limited number of files. A spokesperson for Figure stated that while the breach is concerning, the extent of the data compromised is not extensive. This incident raises alarms about the effectiveness of employee training and awareness regarding phishing tactics, which continue to be a significant vulnerability for many organizations. Users and stakeholders of Figure should remain vigilant and monitor for any unusual activity related to their accounts.
Odido, a telecommunications company, reported a significant data breach that exposed the personal information of approximately 6.2 million customers. The incident occurred over the weekend of February 7, when attackers accessed Odido's customer contact system. This breach raises serious concerns about data privacy and security, as it potentially includes sensitive information that could be misused by malicious actors. Customers may now face risks such as identity theft or phishing attacks, making it crucial for them to monitor their accounts and take protective measures. Odido has not disclosed specific details about how the breach happened or what steps they are taking to prevent future incidents.
1Password has introduced a new open source benchmark called the Security Comprehension and Awareness Measure (SCAM) to address a gap in AI security. Research indicates that while some AI models can accurately identify phishing websites, when these models operate as autonomous agents with access to tools like email and password managers, they can still fall for scams. The SCAM benchmark aims to evaluate whether these AI agents can safely handle sensitive information without leaking credentials. This initiative is important as it seeks to enhance the security of AI applications, helping to prevent potential misuse by attackers. By focusing on the behavior of AI in real-world scenarios, 1Password is taking a proactive step in AI safety.
The Netherlands Police have arrested a 21-year-old man from Dordrecht for allegedly selling access to a phishing tool known as JokerOTP. This tool is designed to capture one-time passwords (OTPs), which attackers can use to hijack online accounts. By exploiting this vulnerability, cybercriminals can gain unauthorized access to sensitive information and accounts, posing a significant threat to individuals and organizations alike. The arrest underscores ongoing efforts by law enforcement to crack down on cybercrime and the tools that facilitate it. Users are advised to remain vigilant and use additional security measures to protect their accounts from such phishing attempts.
In 2025, phishing attacks have evolved significantly, with new tactics gaining traction among cybercriminals. Notably, attackers are using scam QR codes to trick users into revealing personal information. Additionally, 'ClickFix' attacks have emerged, where malicious links appear to fix common issues but instead lead to phishing sites. Another trend includes lures related to ChatGPT subscriptions, enticing users with fake offers. These developments show that users need to be increasingly vigilant about suspicious links and offers, as scammers continue to adapt their methods. Companies and individuals alike must prioritize security awareness to combat these evolving threats effectively.
A new phishing campaign linked to the Phorpiex malware is targeting users globally, delivering ransomware through emails with malicious attachments. These emails often use deceptive double extensions, such as Document.doc.lnk, to trick recipients into opening them. Once activated, the malware can spread across networks, potentially locking files and demanding ransom payments from affected organizations. This ongoing threat, active throughout 2024 and 2025, poses significant risks to businesses and individuals alike, as it can lead to the loss of sensitive data and financial resources. Users need to remain vigilant about email attachments and ensure robust security measures are in place to defend against such attacks.
Volvo Group North America has reported a data breach that occurred due to a cyberattack on Conduent, a business services company that provides IT support to Volvo. The breach exposed customer data, although specific details about what information was compromised have not been disclosed. This incident raises concerns about the security of third-party vendors and the risks they pose to their clients. As companies increasingly rely on external service providers, the need for robust security measures in these partnerships becomes even more critical. Customers of Volvo Group North America should remain vigilant about potential impacts from this breach, including possible phishing attempts or identity theft.