Opsec Cyber Phishing Archives

Category Archives: Phishing

Device Code Phishing

February 19 2025 By Bruce Schneier in authentication, Phishing, Russia, Security

This isn’t new, but it’s increasingly popular:

The technique is known as device code phishing. It exploits “device code flow,” a form of authentication formalized in the industry-wide Read more

Phishing False Alarm

January 15 2025 By Bruce Schneier in Phishing, Security

A very security-conscious company was hit with a (presumed) massive state-actor phishing attack with gift cards, and everyone rallied to combat it—until it turned out it was company management...

AI Will Increase the Quantity—and Quality—of Phishing Scams

June 3 2024 By Bruce Schneier in Phishing, Security

A piece I coauthored with Fredrik Heiding and Arun Vishwanath in the Harvard Business Review:

Summary. Gen AI tools are rapidly making these emails more advanced, harder to spot, and...
Read more

X.com Automatically Changing Link Text but Not URLs

April 16 2024 By Bruce Schneier in Phishing, Security, Twitter

Brian Krebs reported that X (formerly known as Twitter) started automatically changing twitter.com links to x.com links. The problem is: (1) it changed any domain name that ended with...

Crimeware server used by NetWalker ransomware seized and shut down

August 14 2023 By Paul Ducklin in Law & order, Netwalker, Phishing, Ransomware, Security

The site was running from 2014 and allegedly raked in more than $20m, which the DOJ is seeking to claw back...

Teach a Man to Phish and He’s Set for Life

August 4 2023 By BrianKrebs in A Little Sunshine, Latest Warnings, Microsoft, Phishing, Security, Web Fraud 2.0

One frustrating aspect of email phishing is the frequency with which scammers fall back on tried-and-true methods that really have no business working these days. Like attaching a phishing...

UPS Data Harvested for SMS Phishing Attacks

June 23 2023 By Bruce Schneier in Cybercrime, Phishing, Security, SMS, Spam

I get UPS phishing spam on my phone all the time. I never click on it, because it’s so obviously spam. Turns out that hackers have been harvesting actual...

Security Risks of New .zip and .mov Domains

May 19 2023 By Bruce Schneier in cybersecurity, Google, Phishing, Security, vulnerabilities

Researchers are worried about Google’s .zip and .mov domains, because they are confusing. Mistaking a URL for a filename could be a security vulnerability.

[email protected]

Singapore CBD

Category Archives: Phishing

Device Code Phishing

Phishing False Alarm

AI Will Increase the Quantity—and Quality—of Phishing Scams

X.com Automatically Changing Link Text but Not URLs

Crimeware server used by NetWalker ransomware seized and shut down

Teach a Man to Phish and He’s Set for Life

UPS Data Harvested for SMS Phishing Attacks

Security Risks of New .zip and .mov Domains

Recent Posts

Friday Squid Blogging: Live Colossal Squid Filmed

Age Verification Using Facial Scans

CVE Program Almost Unfunded

Slopsquatting

Upcoming Speaking Engagements

Recent Comments

Archives

Categories

Meta

Contact Us

[email protected]

Singapore CBD

+65 8714 2780