Tag: Phishing

New document: 5 minutes to understand Phishing as a Service (PhaaS)

Phishing-as-a-Service (PhaaS) is a fast-growing phenomenon in the cyberthreats world, getting armed with tools that make it more and more prosperous. It has opened up the online fraud market to the masses, to the point that phishing attempts have become a daily plague. Find in this new “5 minutes to understand” document, available for download on the Nameshield’s website, how phishing is now sold in ready-to-use kit and how to protect against it. Download ... Read More

Phishing, slamming and other fraudulent e-mails: stay alert during the end-of-year holidays

Every year, the end of year holidays announce the upsurge of fraudulent e-mails mass campaigns. Indeed, cybercriminals try to profit from these periods when the vigilance is sometimes lowering, to launch phishing e-mails. What are phishing and slamming? Phishing is used by cybercriminals to obtain personal information in order to commit an identity theft. In the world of phishing (for 73% of companies this is the main entry vector for attacks in 2021), the slammi... Read More

ALERT: TLS/SSL certificates – Phishing vigilance

Important: information relating to the situation in Russia, Belarus and Ukraine. In response to the evolving geopolitical situation in Ukraine, many SSL certification authorities are suspending the issuance and reissuance of all types of certificates affiliated with Russia and Belarus. This includes suspending issuance and reissuance of certificates to TLDs related to Russia and Belarus, including .ru, .su, .by, .рф, as well as to organizations with addresses in Russia or Belarus. We ... Read More

NBA: Phishing doesn’t spare sports institutions

Image source: mohamed_hassan via Pixabay On last May 10th, in a press release, the Pacers Sports & Entertainment (PSE) organization, owner of the NBA’s basketball team the Indiana Pacers, revealed that they were the victim of a sophisticated phishing attack at the end of 2018. For reminder, phishing is a technique used to obtain personal information in order to commit an identity theft.  This is a «social engineering» technique, i.e. consisting in exploiting not an IT flaw but a ... Read More

Game of Thrones: The return of the [MALWARES] white walkers by dozens

Image source: Irfan Rafiq via Pexels As with each event where massive interest is expected, the launch of the final season of Game of Thrones is a golden opportunity for pirates. According to a Kaspersky’ study, this series would be the favorite of the cybercriminals. It represented 17% of the infected contents last year, i.e. 20 934 web users! According to this same study, the most targeted episodes are logically the first and last episodes of the season. For if the fans are many... Read More

A high school student tries to change his grades thanks to phishing

Phishing is cybercriminals’ means of choice to hijack users‘ data, posing as a trusty company and then encouraging them to deliver personal information. We are often more inclined to think that this technique is reserved to hackers who try to steal banking or very sensitive information, and yet! An American student of Ygnacio Valley High School, in California, had a great time reproducing identically the website on which his teachers connect to enter marks and comments. This same student then... Read More

A bad phishing story

A victim of phishing from 2015, asked her bank for a refund of 3300€, which was the amount diverted by a fraud author. However, during the legal procedure, the Justice has cancelled the judgement of the local court of October 2017, which has requested to the bank of the victim to refund the corresponding amounts of the phishing operation. The reason of this cancellation? The victim has deliberately communicated some confidential data regarding her credit card, by falling into the trap of... Read More

A phishing attack more and more sophisticated

Recently, some Amazon users have been the victims of a quite sophisticated phishing attack. They received a fake e-mail from Amazon, alerting them that someone attempted to connect to their account by trying to change their password. A six digit code was transmitted with the instruction to call a number to verify the user’s identity. If the web users were not the source of these actions, they were invited to follow a specific procedure to secure their account. When they called the supposed Am... Read More