New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords

Forcepoint’s X-Labs reports an 11-step DHL phishing scam that uses fake OTP codes and EmailJS to harvest user credentials and device telemetry.

·

Cyber Attack, cybersecurity, DHL, Forcepoint, Fraud, Password, Phishing, Phishing Scam, SCAM, Scams and Fraud, Security

¶¶¶¶¶

Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts

Research from Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts.

·

Captcha, Cyber Attack, cybersecurity, Fraud, Privacy, SCAM, Scams and Fraud, Security, SMS

¶¶¶¶¶

New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows

·

Captcha, ClickFix, Cyber Attack, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security, Windows

¶¶¶¶¶

New RecruitRat, SaferRat, Astrinox, Massiv Android Malware Found Targeting 800 Apps

New research from Zimperium reveals four active Android malware campaigns, RecruitRat, SaferRat, Astrinox, and Massiv, targeting over 800 banking apps globally.

·

Android, Astrinox, cybersecurity, Malware, Massiv, RecruitRat, SaferRat, SCAM, Scams and Fraud, Security, Zimperium

¶¶¶¶¶

Fake Claude AI Installer Targets Windows Users with PlugX Malware

Fake Claude AI installer mimicking Anthropic spreads PlugX malware on Windows, using DLL sideloading to gain persistent remote access to infected systems.

·

Anthropic, Claude, cybersecurity, Malware, Malwarebytes, PlugX, SCAM, Scams and Fraud, Security, Windows

¶¶¶¶¶

Fake Ledger Live App on Apple Store Linked to $9.5M Crypto Theft

Apple approved a fake Ledger Live app on its App Store, allowing scammers to steal $9.5 million from more than 50 users. Did you install this app?

·

App Store, Apple, Bitcoin, Blockchain, Crypto, Cyber Crime, cybersecurity, Ledger, Ledger Live, SCAM, Scams and Fraud, Security, ZachXBT

¶¶¶¶¶

OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures

OpenSSF warns hackers impersonate Linux Foundation leaders on Slack, tricking developers into installing malware that can compromise entire systems.

·

Cyber Attack, cybersecurity, Google Workspace, Linux Foundation, Malware, OpenSSF, Phishing, Phishing Scam, SCAM, Scams and Fraud, Security, Slack

¶¶¶¶¶

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware.

·

Blockchain, Cyber Attack, Cyber Crime, cybersecurity, Florida, GraphAlgo, Malware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign

UNC6783 hackers and extortionists impersonate support staff, using fake Okta login pages and social engineering to access corporate systems and steal sensitive data.

·

Austin Larsen, BPO, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Extortion, Google, Okta, SCAM, Scams and Fraud, Security, UNC6783

¶¶¶¶¶

New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto

Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows.

·

ClickFix, Crypto, Cyber Attack, cybersecurity, Malware, Node.js, RAT, Scams and Fraud, Security, Tor, Windows

¶¶¶¶¶

1010.cx

1010.cx

Category: Scams and Fraud

New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords

Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts

New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

New RecruitRat, SaferRat, Astrinox, Massiv Android Malware Found Targeting 800 Apps

Fake Claude AI Installer Targets Windows Users with PlugX Malware

Fake Ledger Live App on Apple Store Linked to $9.5M Crypto Theft

OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign

New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto