UK Fashion Retailer ASOS Hit by Social Engineering Attack, Exposing Customer Data ASOS, a leading online fashion retailer based in the UK, has fallen victim to a sophisticated social engineering attack that has resulted in customer data being compromised. The attackers, who claim to be part of a group called “Xuanye Group,” stole an employee’s … Read more
Microsoft Teams Takes a Stand Against Deepfakes and Impersonation Attacks In a major move to bolster meeting security, Microsoft is set to introduce support for third-party deepfake detection tools in its popular collaboration platform, Teams. The new feature, which will become available in November following a global rollout, aims to protect users from sophisticated social … Read more
A Maryland man has been found guilty of stealing over $53 million from a decentralized cryptocurrency exchange, forcing it to shut down due to lack of funds. Jonathan Spalletta, also known online as “Jspalletta” and “Cthulhon,” was convicted of computer fraud and money laundering after hacking Uranium Finance twice in April 2021. Spalletta’s heists were … Read more
A group of malicious Firefox extensions, masquerading as legitimate wallet apps from Rabby and OKX, has been discovered to be stealing users’ recovery phrases. This heinous practice allows attackers to gain unfettered access to victims’ cryptocurrency wallets, leaving their digital assets vulnerable to theft. The malicious extensions, which have been secretly infiltrating browsers for an … Read more
A sophisticated phishing campaign, dubbed “Wazza Phishkit,” has been targeting high-value organizations across the US, EU, and Australia. The attack involves exploiting exposed identities to create active attack paths, which can lead to devastating breaches if not addressed promptly. The Wazza Phishkit campaign appears to be a carefully crafted operation, leveraging identity exposure as its … Read more
Raheim Hamilton, the mastermind behind the notorious Empire Market dark web marketplace, has been handed a 40-year prison sentence for his role in facilitating over $430 million in illicit transactions between 2018 and 2020. The sprawling cybercrime operation, which operated under the radar of law enforcement until its abrupt shutdown in 2020, was a haven … Read more
ASOS Suffers Data Breach After Hackers Use Social Engineering Tactics to Steal Employee Credentials In a concerning incident that highlights the ongoing threat of social engineering attacks, UK fashion retailer ASOS has confirmed that a recent data breach was caused by hackers who stole an employee’s login credentials and used them to access sensitive information … Read more
Microsoft Teams is set to receive a significant boost in security features, including support for third-party deepfake detection tools and impersonation protection. This move comes as part of Microsoft’s ongoing efforts to strengthen the platform’s defenses against increasingly sophisticated cyber threats. The introduction of third-party deepfake detection solutions will allow organizations to enhance meeting security … Read more
Malicious Firefox Extensions Target Users with Fake Wallets, Putting Recovery Phrases at Risk A new wave of malicious Firefox extensions has been discovered, targeting users with fake wallets that pose as Rabby and OKX wallets. These rogue add-ons have managed to slip past Mozilla’s review process, compromising the security of thousands of users who have … Read more
A widespread phishing campaign, dubbed “Wazza Phishkit,” has been making headlines in recent days as it targets high-profile organizations across the US, EU, and Australia. The attack involves sophisticated social engineering tactics, leveraging exposed identities to create active attack paths that can compromise sensitive information. The Wazza Phishkit campaign appears to be a highly coordinated … Read more