Advanced #Phishing Kit Adds #LastPass Branding for Use in Phishing Campaigns

Threat actors using phishing kits are pretending to be LastPass in phone calls and emails to steal user credentials.

Actual phishing site: “help-lastpass[.]com”

Shortened URL Embedded in Email: shorturl[.]at/glvT0

Phishing Email Subject Line: We’re here for you

Spoofed Sender: Shows as LastPass Support <support@lastpass>

#security #cybersecurity #passwords

https://blog.lastpass.com/posts/2024/04/advanced-phishing-kit-adds-lastpass-branding-for-use-in-phishing-campaigns

Advanced Phishing Kit Adds LastPass Branding for Use in Phishing Campaigns - The LastPass Blog

^{blog.lastpass.com}

A New Kind of Phishing Attack - by @endingwithali

#Phishing #ThreatWire #Discord #Latrodectus

https://www.youtube.com/watch?v=3DxMHGRKJNs

A New Kind of Phishing Attack - ThreatWire

⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitt...

^YouTube

#Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

source: https://krebsonsecurity.com/2024/04/twitters-clumsy-pivot-to-x-com-is-a-gift-to-phishers/

Those include carfatwitter.com, which Twitter/X truncated to carfax.com when the domain appeared in user messages or tweets. Visiting this domain currently displays a message that begins, “Are you serious, X Corp?”

#internet #fail #security #phishing #cybersecurity #twitter #news

Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

On April 9, Twitter/X began automatically modifying links that mention "twitter.com" to redirect to "x.com" instead. But over the past 48 hours, dozens of new domain names have been registered that demonstrate how this change could be used to craft…

^{krebsonsecurity.com}

This is so f***** up!! O_O

Be aware when you receive HTML emails (who doesn't?)!

https://gruene.social/@weddige/112190338668045392

#HTML #HTMLmail #CSS
#Phishing #SCAM
#SocialEngineering
#Thunderbird #Outlook
#KoboldLetters

Konstantin Weddige (@weddige@gruene.social)

Attached: 1 image Welcome to another edition of "Is this phishing?" Assume the email is in principle plausible and the transaction ID exists. What is the worst that can happen if you press send? #phishing

^{gruene.social}

Tänään aukesi valtion ylläpitämä vapaaehtoisen luottokiellon rekisteri.

Teimme sen käytöstä pienen oppaan, samalla kertoen mistä oikein on kyse.

Suosittelemme *todella* vahvasti, että tätä haetaan vähänkään digitaidoista epävarmemmille vanhemmille sukulaisille.

Ja tietysti myös, jos vähääkään epäilet, että olet joutunut identiteettivarkauden uhriksi.

https://dawn.fi/uutiset/2024/04/01/vapaaehtoinen-luottokielto-opas

#luottokielto #luottorekisteri #phishing #huijaus #identiteettivarkaus #uutiset #teknologia #opas #tekniikka

Opas: Näin haet vapaaehtoista luottokieltoa

Vapaaehtoinen luottokielto on nyt mahdollista tehdä suoraan verohallinnon palvelun kautta. Oppaamme neuvoo miten luottokieltoa haetaan, jos epäilet vaikkapa identiteettivarkautta.

^{Petteri Pyyny (AfterDawn)}