• Trend Micro
  • About TrendLabs Security Intelligence Blog
Search:
  • Home
  • Categories
    • Ransomware
    • Vulnerabilities
    • Exploits
    • Targeted Attacks
    • Deep Web
    • Mobile
    • Internet of Things
    • Malware
    • Bad Sites
    • Spam
    • Botnets
    • Social
    • Open source
Home   »   Bad Sites

Tech Support Scam Employs New Trick by Using Iframe to Freeze Browsers

  • Posted on:April 29, 2019 at 4:51 am
  • Posted in:Bad Sites
  • Author:
    Trend Micro
0

We discovered a new technical support scam (TSS) campaign that makes use of iframe in combination with basic pop-up authentication to freeze a user’s browser. Since this technique is new and unfamiliar, it can potentially evade detection.

Read More
Tags: Tech Support ScamTSS

Phishing Attack Uses Browser Extension Tool SingleFile to Obfuscate Malicious Log-in Pages

  • Posted on:April 4, 2019 at 5:08 am
  • Posted in:Bad Sites
  • Author:
    Trend Micro
0

While doing a search for phishing pages with unique log-in characteristics, we came upon a phishing attack that involves using a legitimate tool called SingleFile as the obfuscation method to avoid detection.

Read More
Tags: phishingSingleFile

Desktop, Mobile Phishing Campaign Targets South Korean Websites, Steals Credentials Via Watering Hole

  • Posted on:March 28, 2019 at 5:02 am
  • Posted in:Bad Sites, Mobile
  • Author:
    Joseph C Chen (Fraud Researcher)
0

We discovered a phishing campaign targeting South Korean websites and users’ credentials using the watering hole technique. Labeling the campaign Soula, cybercriminals injected a malicious JS code in at least four websites for a fake login pop-up to appear at intervals before they can continue using the pages.

Read More
Tags: JavaScriptphishingSouth Koreawatering hole

Shifting Strategies: Using Social Media, SEO in Tech Support Scams

  • Posted on:February 28, 2019 at 10:01 pm
  • Posted in:Bad Sites
  • Author:
    Trend Micro
0

Tech support scams have diversified into new territory. They now use pop-up alerts and social engineering tactics to spread fake toll-free numbers and links of their fake tech support websites on popular social media platforms.

Read More
Tags: social mediasocial media scamsTech support scams

How a Hacking Group is Stealing Popular Instagram Profiles

  • Posted on:February 28, 2019 at 5:18 am
  • Posted in:Bad Sites, Social, Spam
  • Author:
    Trend Micro
0

Social media influencers build and expand their business or brand through credibility and authenticity to their audience. For hackers, however, they could be seen as trophies. That’s what happened to a photographer with more than 15,000 followers on Instagram, when she had her account stolen.

A closer look into the incident revealed that the hacker got into her account through phishing. While it seemed straightforward enough, we also found that targeting popular Instagram profiles has become a modus for a certain group of Turkish-speaking hackers. And by abusing Instagram’s account recovery process, they were able to keep the stolen account even if the victim squarely followed the process.  We’ve seen cases where owners of Instagram profiles with followers between 15,000 and 70,000 were hacked and were never retrieved. The victims ranged from famous actors and singers to owners of startup businesses like photoshoot equipment rentals.

Read More
Tags: instagramphishing
Page 4 of 340 « ‹ 345 › »

Security Predictions for 2020

  • Cybersecurity in 2020 will be viewed through many lenses — from differing attacker motivations and cybercriminal arsenal to technological developments and global threat intelligence — only so defenders can keep up with the broad range of threats.
    Read our security predictions for 2020.

Business Process Compromise

  • Attackers are starting to invest in long-term operations that target specific processes enterprises rely on. They scout for vulnerable practices, susceptible systems and operational loopholes that they can leverage or abuse. To learn more, read our Security 101: Business Process Compromise.

Popular Posts

Sorry. No data so far.

Stay Updated

  • Home and Home Office
  • |
  • For Business
  • |
  • Security Intelligence
  • |
  • About Trend Micro
  • Asia Pacific Region (APAC): Australia / New Zealand, 中国, 日本, 대한민국, 台灣
  • Latin America Region (LAR): Brasil, México
  • North America Region (NABU): United States, Canada
  • Europe, Middle East, & Africa Region (EMEA): France, Deutschland / Österreich / Schweiz, Italia, Россия, España, United Kingdom / Ireland
  • Privacy Statement
  • Legal Policies
  • Copyright © Trend Micro Incorporated. All rights reserved.