#cofense — Public Fediverse posts

New Tech Support Scam Uses Microsoft Logo to Fake Browser Lock, Steal Data https://hackread.com/tech-support-scam-microsoft-logo-browser-lock-data/ #ScamsandFraud #Cybersecurity #TechSupport #Microsoft #Security #Browser #Cofense #Privacy #Fraud #Scam

Vietnamese Hackers Use Fake Copyright Notices to Spread Lone None Stealer https://hackread.com/vietnamese-hackers-fake-copyright-notice-lone-none-stealer/ #LoneNoneStealer #PureLogsStealer #Cryptocurrency #Cybersecurity #CyberAttack #Infostealer #Copyright #Security #LoneNone #Telegram #Malware #Cofense #Vietnam #Scam

Vietnamese Hackers Use Fake Copyright Notices to Spread Lone None Stealer https://hackread.com/vietnamese-hackers-fake-copyright-notice-lone-none-stealer/ #LoneNoneStealer #PureLogsStealer #Cryptocurrency #Cybersecurity #CyberAttack #Infostealer #Copyright #Security #LoneNone #Telegram #Malware #Cofense #Vietnam #Scam

Vietnamese Hackers Use Fake Copyright Notices to Spread Lone None Stealer https://hackread.com/vietnamese-hackers-fake-copyright-notice-lone-none-stealer/ #LoneNoneStealer #PureLogsStealer #Cryptocurrency #Cybersecurity #CyberAttack #Infostealer #Copyright #Security #LoneNone #Telegram #Malware #Cofense #Vietnam #Scam

Vietnamese Hackers Use Fake Copyright Notices to Spread Lone None Stealer https://hackread.com/vietnamese-hackers-fake-copyright-notice-lone-none-stealer/ #LoneNoneStealer #PureLogsStealer #Cryptocurrency #Cybersecurity #CyberAttack #Infostealer #Copyright #Security #LoneNone #Telegram #Malware #Cofense #Vietnam #Scam

Cofense Vision 3.0 identifies user engagement with phishing emails https://www.helpnetsecurity.com/2025/08/19/cofense-vision-3-0/ #Industrynews #Cofense

Firebase, Google Apps Script Abused in Fresh Phishing Campaigns – Source: www.securityweek.com https://ciso2ciso.com/firebase-google-apps-script-abused-in-fresh-phishing-campaigns-source-www-securityweek-com/ #rssfeedpostgeneratorecho #Fraud&IdentityTheft #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #Firebase #Cofense #Trellix #Google #eset

Firebase, Google Apps Script Abused in Fresh Phishing Campaigns https://www.securityweek.com/firebase-google-apps-script-abused-in-fresh-phishing-campaigns/ #Fraud&IdentityTheft #Malware&Threats #Firebase #Cofense #Trellix #google #ESET

Phishing Attack Uses Blob URIs to Show Fake Login Pages in Your Browser https://hackread.com/phishing-attack-blob-uri-fake-login-pages-browser/ #Cybersecurity #PhishingScam #CyberAttack #Security #Cofense #Privacy #Fraud #Blob

Phishing Attack Uses Blob URIs to Show Fake Login Pages in Your Browser – Source:hackread.com https://ciso2ciso.com/phishing-attack-uses-blob-uris-to-show-fake-login-pages-in-your-browser-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #PhishingScam #CyberAttack #Hackread #security #Cofense #privacy #Fraud #Blob

Threat actors are stepping up their tactics to bypass email protections https://www.helpnetsecurity.com/2024/11/01/cybercriminals-emails-protections-video/ #AbnormalSecurity #cybersecurity #emailsecurity #Cofense #Video #email #video #News

Threat actors are stepping up their tactics to bypass email protections https://www.helpnetsecurity.com/2024/11/01/cybercriminals-emails-protections-video/ #AbnormalSecurity #cybersecurity #emailsecurity #Cofense #Video #email #video #News

Threat actors are stepping up their tactics to bypass email protections https://www.helpnetsecurity.com/2024/11/01/cybercriminals-emails-protections-video/ #AbnormalSecurity #cybersecurity #emailsecurity #Cofense #Video #email #video #News

Threat actors are stepping up their tactics to bypass email protections https://www.helpnetsecurity.com/2024/11/01/cybercriminals-emails-protections-video/ #AbnormalSecurity #cybersecurity #emailsecurity #Cofense #Video #email #video #News

Cofense improves visibility of dangerous email-based threats https://www.helpnetsecurity.com/2024/10/23/cofense-pdr-platform/ #Industrynews #Cofense

Security measures fail to keep up with rising email attacks https://www.helpnetsecurity.com/2024/09/13/email-attacks-increase/ #AbnormalSecurity #cybersecurity #VIPRESecurity #emailsecure #cybercrime #Proofpoint #Coalition #Darktrace #Acronis #Cofense #Egress #report #survey #email #News

Security measures fail to keep up with rising email attacks https://www.helpnetsecurity.com/2024/09/13/email-attacks-increase/ #AbnormalSecurity #cybersecurity #VIPRESecurity #emailsecure #cybercrime #Proofpoint #Coalition #Darktrace #Acronis #Cofense #Egress #report #survey #email #News

Infosec products of the month: June 2024 https://www.helpnetsecurity.com/2024/07/01/infosec-products-of-the-month-june-2024/ #VeritasTechnologies #SentinelOne #TrendMicro #Verimatrix #SailPoint #Diligent #eSentire #NinjaOne #Plainsea #Acronis #Appdome #Cofense #Datadog #Entrust #Metomic #Atsign #Tines #Zyxel #News #ARMO #KELA

Infosec products of the month: June 2024 https://www.helpnetsecurity.com/2024/07/01/infosec-products-of-the-month-june-2024/ #VeritasTechnologies #SentinelOne #TrendMicro #Verimatrix #SailPoint #Diligent #eSentire #NinjaOne #Plainsea #Acronis #Appdome #Cofense #Datadog #Entrust #Metomic #Atsign #Tines #Zyxel #News #ARMO #KELA

Infosec products of the month: June 2024 https://www.helpnetsecurity.com/2024/07/01/infosec-products-of-the-month-june-2024/ #VeritasTechnologies #SentinelOne #TrendMicro #Verimatrix #SailPoint #Diligent #eSentire #NinjaOne #Plainsea #Acronis #Appdome #Cofense #Datadog #Entrust #Metomic #Atsign #Tines #Zyxel #News #ARMO #KELA

Infosec products of the month: June 2024 https://www.helpnetsecurity.com/2024/07/01/infosec-products-of-the-month-june-2024/ #VeritasTechnologies #SentinelOne #TrendMicro #Verimatrix #SailPoint #Diligent #eSentire #NinjaOne #Plainsea #Acronis #Appdome #Cofense #Datadog #Entrust #Metomic #Atsign #Tines #Zyxel #News #ARMO #KELA

New infosec products of the week: June 28, 2024 https://www.helpnetsecurity.com/2024/06/28/new-infosec-products-of-the-week-june-28-2024/ #eSentire #Cofense #Datadog #News #ARMO

New infosec products of the week: June 28, 2024 https://www.helpnetsecurity.com/2024/06/28/new-infosec-products-of-the-week-june-28-2024/ #eSentire #Cofense #Datadog #News #ARMO

New infosec products of the week: June 28, 2024 https://www.helpnetsecurity.com/2024/06/28/new-infosec-products-of-the-week-june-28-2024/ #eSentire #Cofense #Datadog #News #ARMO

New infosec products of the week: June 28, 2024 https://www.helpnetsecurity.com/2024/06/28/new-infosec-products-of-the-week-june-28-2024/ #eSentire #Cofense #Datadog #News #ARMO

Cofense enhances PhishMe to identify engagement and resilience gaps across all employee levels https://www.helpnetsecurity.com/2024/06/26/cofense-phishme-employee-engagement-index/ #Industrynews #Cofense

Phishing statistics that will make you think twice before clicking https://www.helpnetsecurity.com/2024/05/21/phishing-statistics-2024/ #OstermanResearch #VIPRESecurity #cybercrime #Ironscales #Proofpoint #Don'tmiss #Hotstuff #LastPass #phishing #Cofense #Zscaler #Egress #report #survey #News

Phishing statistics that will make you think twice before clicking https://www.helpnetsecurity.com/2024/05/21/phishing-statistics-2024/ #OstermanResearch #VIPRESecurity #cybercrime #Ironscales #Proofpoint #Don'tmiss #Hotstuff #LastPass #phishing #Cofense #Zscaler #Egress #report #survey #News

Phishing statistics that will make you think twice before clicking https://www.helpnetsecurity.com/2024/05/21/phishing-statistics-2024/ #OstermanResearch #VIPRESecurity #cybercrime #Ironscales #Proofpoint #Don'tmiss #Hotstuff #LastPass #phishing #Cofense #Zscaler #Egress #report #survey #News

Phishing statistics that will make you think twice before clicking https://www.helpnetsecurity.com/2024/05/21/phishing-statistics-2024/ #OstermanResearch #VIPRESecurity #cybercrime #Ironscales #Proofpoint #Don'tmiss #Hotstuff #LastPass #phishing #Cofense #Zscaler #Egress #report #survey #News

Cybercrime stats you can’t ignore https://www.helpnetsecurity.com/2024/05/07/cybercrime-stats-2024/ #GuidePointSecurity #SecurityScorecard #AbnormalSecurity #OstermanResearch #cybersecurity #VIPRESecurity #cybercrime #Ironscales #ReliaQuest #Don'tmiss #Trustwave #Hotstuff #SpyCloud #Cofense #Imperva #Akamai #Egress #report #Sophos #survey #Thales #News #Visa

Cybercrime stats you can’t ignore https://www.helpnetsecurity.com/2024/05/07/cybercrime-stats-2024/ #GuidePointSecurity #SecurityScorecard #AbnormalSecurity #OstermanResearch #cybersecurity #VIPRESecurity #cybercrime #Ironscales #ReliaQuest #Don'tmiss #Trustwave #Hotstuff #SpyCloud #Cofense #Imperva #Akamai #Egress #report #Sophos #survey #Thales #News #Visa

Cybercrime stats you can’t ignore https://www.helpnetsecurity.com/2024/05/07/cybercrime-stats-2024/ #GuidePointSecurity #SecurityScorecard #AbnormalSecurity #OstermanResearch #cybersecurity #VIPRESecurity #cybercrime #Ironscales #ReliaQuest #Don'tmiss #Trustwave #Hotstuff #SpyCloud #Cofense #Imperva #Akamai #Egress #report #Sophos #survey #Thales #News #Visa

Cybercrime stats you can’t ignore https://www.helpnetsecurity.com/2024/05/07/cybercrime-stats-2024/ #GuidePointSecurity #SecurityScorecard #AbnormalSecurity #OstermanResearch #cybersecurity #VIPRESecurity #cybercrime #Ironscales #ReliaQuest #Don'tmiss #Trustwave #Hotstuff #SpyCloud #Cofense #Imperva #Akamai #Egress #report #Sophos #survey #Thales #News #Visa

How malicious email campaigns continue to slip through the cracks https://www.helpnetsecurity.com/2024/04/08/email-remains-predominant-target-video/ #communication #cybersecurity #Don'tmiss #Hotstuff #phishing #Cofense #exploit #QRcodes #vishing #Video #email #video

QRishing – trudniej go wykryć i rzadziej się przed nim ostrzega

“Nie klikaj w linki w mailach. Włącz 2FA” – takie porady słyszy się coraz częściej. Niestety oszuści mogą wykorzystać właśnie motyw włączania 2FA w celu wykradania haseł i nie będzie to wymagać typowego klikania w linki. Ta technika oszustw znana jest od lat, ale wydaje się ostatnio zdobywać popularność.

Firma Cofense poinformowała o zidentyfikowaniu dużej kampanii phishingowej wykorzystującej kody QR. Jej celem było m.in. duże amerykańskie przedsiębiorstwo z branży energetycznej oraz inne firmy z branż: produkcyjnej, ubezpieczeniowej, technologicznej i finansowej. Wydaje się, że warto omówić zarówno tę konkretną kampanię jak i specyficzny rodzaj phishingu, który wykorzystuje kody skanowane telefonem. Już przed laty ukuto dla tego oszustwa termin qrishing, ale nie było powodów by często tego terminu używać.
Włącz 2FA! Użyj telefonu
W przypadku rzeczonej kampanii atakującej przedsiębiorstwo energetyczne pracownicy firmy dostawali e-maile  z kodem w pliku PNG. Maile przekonywały, że w związku z procedurami bezpieczeństwa konieczne jest włączenie weryfikacji 2FA poprzez zeskanowanie kodu QR. Oczywiście po zeskanowaniu kodu należało się zalogować i tu był pies pogrzebany – kod kierował użytkownika do strony fałszywej, służącej wyłudzeniu danych uwierzytelniających.
Fragment maila z kampanią QRishingową zaobserwowaną przez Cofence
Przestępcy byli sprytni. Zastosowali link z przekierowaniem przez domenę Bing.com. Takie adresy URL, tworzone zwykle w celach marketingowych, zaczynają się od adresu bing.com, potem mają pewien ciąg znaków istotny dla działań marketingowych, a dopiero na końcu mają doklejony adres e-mail ofiary oraz link do strony docelowej zakodowany w Base64. Nie każdy pracownik biurowy wie [...]

#Cofense #Phishing #Qrishing #Socjotechnika

https://niebezpiecznik.pl/post/qrishing-trudniej-go-wykryc-i-rzadziej-sie-przed-nim-ostrzega/

📬Emotet is back: weihnachtliche Rückkehr mit neuen Taktiken📬 https://tarnkappe.info/emotet-is-back-weihnachtliche-rueckkehr-mit-neuen-taktiken/ #Malwarebytes #Proofpoint #TrendMicro #BradHaas #Hacking #Cofense #Emotet

Мошенники используют Google Ads для осуществления фишинговых атак #фишинг, #Cofense https://www.securitylab.ru/news/510700.php https://twitter.com/SecurityLabnews/status/1289175767910252544/photo/1

Мошенники используют Google Ads для осуществления фишинговых атак #фишинг, #Cofense https://www.securitylab.ru/news/510700.php https://twitter.com/SecurityLabnews/status/1289175665132990464/photo/1