#Social Engineering
98 stories taggedSocial Engineering.

UK Account Hijacking Fraud Up 400% as Scammers Sell Fake Tickets Through Victims' Own Profiles
Criminals are breaking into people's email and social media accounts to impersonate them, then selling counterfeit concert tickets to the victim's own friends. The UK's cybersecurity authority says one fix is already in most people's pockets.

Fake IT Support on Microsoft Teams Is Now a Full Corporate Break-In
Microsoft says attackers are cold-calling staff on Teams, talking them into a screen share, then walking straight through the network to domain controllers.

Sports Cars, Private Jets, Mansions: How a $240 Million Bitcoin Theft Ended in Arrests
A group of crypto criminals stole $240 million in Bitcoin from a single victim, then spent so openly that investigators barely had to look.

Fake Student Finance Texts Are Targeting New Students Right Before Their Loan Drops
Criminals are sending convincing fake messages about bank-detail changes to students waiting on their first maintenance loan payment. Here is what is actually going on.

When Password Resets Become the Front Door: The Rise of Help Desk Attacks
Multi-factor authentication has pushed criminals to a softer target: the humans who reset it.

AdaptHealth Confirms 4.1 Million Patients Hit in Breach Tied to ShinyHunters
The home medical supplier says a contractor's account was tricked open in June, giving intruders a path into patient records across all 50 states.

The Longitude Problem: Why Ground Truth Beats Guesswork in the AI Age
For centuries, sailors died because they could estimate their position but not confirm it. Attackers targeting your company today face the same gap, and your best defence is the same one that finally solved navigation.

Half of All Real Attacks Now Target Logins, Says Prophet Security Review
A quarter of investigating every alert across customer environments shows identity abuse, help-desk trickery and old-school phishing still doing most of the damage.

2.47 Million Simulated Attacks Suggest We're Measuring the Wrong Things in Phishing Training
New research points out a gap between what most companies track (who clicked a fake link) and what actually matters (whether stolen passwords are being spotted and staff are reporting suspicious emails).

Revolut handed customer passports and selfies to a scammer with a real-looking government email
The fintech says it fulfilled an information request that arrived from a genuine-looking government domain, exposing IDs, selfies and full transaction histories of what it calls a very limited number of customers.

Hijacked HBO Max Reddit account pushed 108 malware ads in 48 hours
A verified account was used to run a copy-paste scam that infected Windows and Mac users with password stealers and crypto-wallet thieves.

Your Security Team Is Split in Two. Criminals Are Not.
Deepfakes and AI-powered scams now cross physical and digital boundaries at the same time. Most company security programs aren't built to follow.

Crime Gangs Are Running Bot-Powered Sextortion Factories. Young Men Are the Target.
Organised criminal networks are using AI-generated fake personas, automated accounts, and psychological pressure to extort young men out of thousands of dollars. South Australia alone lost $217,000 in a single year.

Hackers Are Hijacking Remote-Support Software to Spread Malware Across Whole Networks
A modified version of the popular IT tool ScreenConnect is being used in a self-spreading attack that starts with a fake tech-support call and ends with criminals inside your entire network.

Fake Job Interviews Are Draining Bank Accounts. Here Is How the Scam Works.
Criminals posing as recruiters on LinkedIn and Indeed are tricking jobseekers into downloading malware disguised as interview software. One person lost £18,000 in cryptocurrency overnight.