An exodus of Twitter's security staff, including a surprising departure from the company's Chief Information Security Officer Lea Kissner, has proven detrimental thus far - with security experts warning that a massively reduced cybersecurity team would allow for potential bad actors to take advantage of growing security vulnerabilities.
Personalize Your Content
15,000+ WordPress Sites Compromised in Hostile SEO Scheme
Cybercriminals have successfully launched a malicious black hat search engine optimization (SEO) campaign, redirecting website visitors to fake Q&A portals. This hostile SEO scheme can be "described as malware designed to hijack a website in order to abuse its resources (especially website traffic and rankings)". Hackers managed to compromise over 15,000 WordPress websites to redirect to these fraudulent Q&A websites. The attack aims to promote low-quality websites, preparing these pages for future use as malware droppers or phishing sites.
Scam of the Week: Android Apps Redirect Users to Malicious Sites
Recently uncovered by cybersecurity researchers, a set of four Android apps have been found to link users to malicious sites. These malicious sites either install adware or attempt to steal information from the user, in what has found to be a massive cybercrime campaign. The apps were all created by
CISA Unveils Daixin Team Hacking Efforts into Healthcare Organizations
Recently unearthed by investigators, a group of cybercriminals called the 'Daixin Team' have been discovered to be targeting the Healthcare and Public Health (HPH) sector with ransomware and data extortion methods. The group has been active since at least June 2022.
Scam of the Week: PayPal Crypto Invoice Scam
Fraudsters on the Internet have found a new method for stealing cash from ordinary people. Disguising their fraudulent activity as legitimate invoices, scammers pose as PayPal sellers requesting invoices for different cryptocurrencies.
Researchers uncover phishing-as-a-service platform Caffeine
Paid subscriptions are required to access the vast amount of features the cybercriminal Caffeine platform boasts. These features include customized phishing kits, campaign success tracking tools, management of redirect pages, tools to configure attacks, and generation of dynamic URLs that host payloads. Researchers also discovered templates earmarked for use against Russian or Chinese targets.