Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Scam season: Don’t get hacked

bugcrowd.com | blog | #phishing | #social-engineering | #bugcrowd | #scams | #holiday-fraud | #dmarc | #usps

Summary

Holiday scam season is ramping up: delivery phishing so convincing that queries to fake USPS domains rival the real site, while 40% of top US retailers fail to enforce DMARC reject, plus puppy scams.
Published
Collected

original ↗

Related coverage

  1. Inside ClickFix: How Fake Prompts Took Over the Web (netlas.io)
  2. Emerging phishing campaign targeting AWS accounts (wiz.io)
  3. Phishing by Appointment: Suspected North Korean Hackers Target Blockchain Community Via Telegram (hunt.io)
  4. Hacking a Massive Steam Scamming and Phishing Operation for Fun and Profit (samcurry.net)
  5. Unmasking Phishing: Strategies for identifying 0ktapus domains and beyond (wiz.io)
  6. What’s changed in AI security over the past two years (bugcrowd.com)

back