The Hacker News17h
OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection
OBSCURE#BAT malware exploits fake CAPTCHA pages and malvertising to deploy rootkit r77, evading detection via registry ...
ClickFix attack delivers infostealers, RATs in fake Booking.com emails
Microsoft is warning that an ongoing phishing campaign impersonating Booking.com is using ClickFix social engineering attacks ...
Microsoft1d
Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware
Starting in December 2024, leading up to some of the busiest travel days, Microsoft Threat Intelligence identified a phishing ...
IT-Online14h
Phishing campaign targets Booking.com users
Starting in December 2024, leading up to some of the busiest travel days, Microsoft Threat Intelligence identified a phishing campaign that impersonates online travel agency Booking.com and targets ...
Infosecurity Magazine1d
‘ClickFix’ Phishing Scam Impersonates Booking.com to Target Hospitality
Microsoft said the ongoing phishing campaign is designed to infect hospitality firms with multiple credential-stealing ...
Cryptopolitan on MSN14d
Russian hackers spread GrassCall malware to drain crypto wallets via fake job postings
As part of a social engineering campaign, hackers are reportedly sending fake job offers to job seekers in the web3 space ...
The Hacker News1d
Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails
Microsoft warns of a phishing campaign using ClickFix to spread malware via fake Booking.com emails. Attackers exploit fake CAPTCHA pages to steal cre ...
That 'angry guest' email from Booking.com? It's a scam, not a 1-star review
An ongoing phishing campaign disguised as a Booking.com email casts keystroke and credential-stealing malware into hospitality employees' inboxes for financial fraud and theft, according to Microsoft ...
Bleeping Computer16d
GrassCall malware campaign drains crypto wallets via fake job interviews
they will be prompted to enter the code shared by the fake CMO in the Telegram conversion. Entering the correct code, the website will either offer a Windows "GrassCall.exe" client [VirusTotal] or ...
Security Boulevard17d
DeepSeek Lure Using CAPTCHAs To Spread Malware
IntroductionThe rapid rise of generative AI tools has created opportunities and challenges for cybercriminals. In an instant, industries are being reshaped while new attack surfaces are being exposed.
BeInCrypto12d
China Warns About DeepSeek Crypto Scams Targeting Investors
Chinese authorities have warned about scammers posing as DeepSeek developers to defraud investors through fake crypto projects.
Security Boulevard4d
Microsoft: Massive Malvertising Campaign Infects a Million Devices
A massive malvertising campaign that targeted individuals watching pirated videos on illegal streaming sites redirected them several times before landing them at GitHub repositories that hosted ...