Posts under the Scam

Articles in Blog Posts

February 14, 2025

Valentine's Day Cyber Attack Landscape: Exploiting Love Through Digital Deception

Valentine’s Day 2025 has become a prime target for cybercriminals exploiting emotional vulnerabilities and seasonal shopping habits. From OAuth-based phishing and brand impersonation to cryptocurrency fraud and fake e-commerce sites, these scams leverage holiday sentiments to deceive consumers and businesses alike. Sophisticated tactics like social media-driven amplification, manipulated payment gateways, and romance scams create a self-replicating threat ecosystem. Protect yourself by verifying websites, avoiding suspicious links, and enabling security features. Stay informed and safeguard your digital presence this Valentine’s season! ❤️🔐 #CyberSecurity #ValentinesDayScams

Written by

Pagilla Manohar Reddy

January 20, 2025

Facilitating Phishing and Pig Butchering Activities using Zendesk Infrastructure [Bait & Switch Mode]

Phishing campaigns and "pig butchering" scams have increasingly exploited Zendesk's SaaS infrastructure, leveraging its free trial subdomains to mimic legitimate brands and deceive unsuspecting users. By registering subdomains with brand-like names, attackers create authentic-looking interfaces to facilitate phishing, data theft, and financial fraud. This misuse is compounded by B2B marketing tools that assist in gathering employee emails, and by Zendesk's lack of email verification for ticket assignments, which allows phishing emails to bypass spam filters. To mitigate these risks, organizations must implement proactive measures such as blacklisting unknown Zendesk instances, utilizing detection tools like XVigil, and educating employees about phishing tactics.

Written by

December 30, 2024

High potential for online shopping scams and phishing attacks targeting post-holiday sales.

Post-holiday sales come with heightened risks of online shopping scams and phishing attacks as cybercriminals exploit consumer enthusiasm with fake websites, phishing emails, and fraudulent deals. Common schemes include CEO fraud, fake domains imitating major brands like Amazon and eBay, and malicious advertising. Scammers also target payment portals, leveraging fake credit card gateways, and deploy malware through seemingly legitimate e-cards. To stay safe, shoppers should verify website authenticity, avoid clicking on unsolicited links, and use trusted payment methods. Remaining vigilant and informed about these threats can help mitigate financial losses and maintain trust in e-commerce platforms.

Written by

Ayush Panwar

December 16, 2024

How Threat Actors Exploit Brand Collaborations to Target Popular YouTube Channels

Cybercriminals are increasingly targeting YouTube creators by exploiting fake brand collaboration offers to distribute malware. These sophisticated phishing campaigns involve carefully crafted emails that impersonate trusted brands, presenting enticing partnership deals. The malware, disguised as legitimate documents like contracts or promotional materials, is often delivered through password-protected files hosted on platforms such as OneDrive to evade detection. Once downloaded, the malware can steal sensitive information, including login credentials and financial data, while also granting attackers remote access to the victim’s systems. With content creators and marketers as primary targets, this global campaign underscores the importance of verifying collaboration requests and adopting robust cybersecurity measures to protect against such threats.

Written by

Mayank Sahariya

December 2, 2024

Cyber Monday Scams: A Comprehensive Analysis of Threats and Mitigation Strategies

The blog explores the growing threat landscape of Cyber Monday scams, detailing the diverse tactics cybercriminals use to exploit the online shopping surge. Key threats include phishing attacks, fake online marketplaces, social media scams, fraudulent gift card generators, and advanced tools like Malware-as-a-Service (MaaS). Psychological manipulation tactics—such as urgency, authority, and social proof—amplify the success of these schemes.

Written by

CloudSEK TRIAD

October 30, 2024

Beware the Boogeyman: Protect Yourself from Halloween-Themed Scams

As Halloween approaches, online scams targeting eager celebrants are on the rise. Scammers exploit increased spending on costumes, decorations, and events using fake websites, phishing schemes, and counterfeit products. Tactics include fraudulent costume shops, fake charity events, and phishing links that mimic reputable brands. Protect yourself by verifying websites, sticking to trusted retailers, avoiding unsolicited messages, and reporting scams. Stay vigilant to enjoy a safe and scam-free Halloween season.

Written by

CloudSEK TRIAD

Scam

Articles in Blog Posts

Valentine's Day Cyber Attack Landscape: Exploiting Love Through Digital Deception

Facilitating Phishing and Pig Butchering Activities using Zendesk Infrastructure [Bait & Switch Mode]

High potential for online shopping scams and phishing attacks targeting post-holiday sales.

How Threat Actors Exploit Brand Collaborations to Target Popular YouTube Channels

Cyber Monday Scams: A Comprehensive Analysis of Threats and Mitigation Strategies

Beware the Boogeyman: Protect Yourself from Halloween-Themed Scams

Articles in Threat Intelligence

Critical CSRF Vulnerability in IBM CICS TX - CVE-2023-42027 Demands Immediate Action

CVE-2023-43792 baserCMS is a website development framework vulnerable to Code Injection attacks

CVE-2023-4197 Vulnerability in Dolibarr ERP CRM 18.0.1 Allows PHP Code Injection

Hoze shell script dropped along with XMRig miners on misconfigured SSH Servers by Brute Forcing

3,20,000+ Patient Records From Ayush Jharkhand Gov. In Shared On Dark Web Hacking Forums

Rogue Scripts Are Exploiting OTP Verification APIs To Send Heaps of OTP SMSes, Hold The Potential Of Triggering Service Disruptions.

Join 10,000+ subscribers