The GPT Store is filling up with spam GPTs

andreasc
-
0
The GPT Store is filling up with spam GPTs

[ad_1]

This is an issue that any digital storefront has to deal with, spam. App stores and game stores have to deal with it, so it’s only logical that the new GPT store has to also deal with it. Yes! The GPT store, even though it’s only a few months old, is already being overrun with spam GPTs.

If you don’t know what the GPT store is, you might want to if you’re an avid ChatGPT user. A GPT is like a customized version of ChatGPT that is specialized to perform a specific function. Say, you’d like a version of ChatGPT that specializes in giving you facts about movies. You could also find one that specializes in accounting or paleontology.

You can access and install GPTs if you are a ChatGPT Plus member. There’s no word on whether the company plans on bringing this functionality down to free users. You will just want to be careful because a recent report found that several extensions and GPTs have led to people having their accounts hacked or stolen.

The GPT store seems to be filling up with spam

As much as we would like to believe the opposite, this was inevitable. Any sort of storefront is susceptible to spam from unsavory individuals. TechCrunch did an investigation into the GPT store, and it found several GPTs that should rightfully violate OpenAI’s terms of service. These are GPTs that can cause some serious copyright infringement. It found a generator that could create monsters in the style of Pixar’s Monsters Inc. There is also another GPT that can imitate Aang from Avatar: The Last Airbender. The list goes on, and it contains GPTs that could either get the creators sued or OpenAI sued.

Not only that but there are other GPTs that promise to bypass ChatGPT’s safety guardrails. That is just a breeding ground for all sorts of trouble. ChatGPT is able to create some rather inappropriate content, but there are still tough guardrails in place to keep things from getting even worse. So, imagine if the chatbot did not have a filter for inappropriate content. This is the kind of thing that many people want. Well, there are some GPTs out there that promise to let you do whatever you want.

Another type of GPT found is something that many of us have dealt with on app stores. These are GPTs that are basically just empty shells. They’re completely useless bits of code that are just a conduit to a paid service.

Unfortunately, there are many more spammy GPTs on the GPT store, and we predict that it’s going to get worse. Open AI said that there are about 3 million GPTs on the store, and we can expect that a good amount of them are spam.

How OpenAI moderates GPTs

In order for a GPT to be posted to the store, it has to go through an approval process. The company says that it uses a mixture of automated systems and human review to determine if a GPT is appropriate. However, it appears that many spammy GPTs are slipping through the cracks.

At this point, we don’t know what OpenAI is planning on doing to eliminate the risk of spammy GPTs. In the meantime, if you are using these, then you will just need to be careful with which ones you install.

[ad_2]

Source link

Nemesis Market: Leading Darknet Market Seized

andreasc
-
0
Nemesis Market: Leading Darknet Market Seized

[ad_1]

The infamous Nemesis Market, a leading figure in the darknet marketplace ecosystem, has been successfully seized.

This operation dismantles a major hub of illegal online trade, ranging from narcotics to stolen data, affecting thousands of users worldwide.

The Rise of Nemesis Market

Nemesis Market emerged as a dominant player in the darknet space, filling the void left by previous marketplaces that were taken down by law enforcement.

Document

Free Webinar : Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.:

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

AcuRisQ, that helps you to quantify risk accurately:

It quickly gained notoriety for its sophisticated security measures, a wide array of illicit goods, and its ability to evade the authorities.

The platform was known for trading in drugs, weapons, stolen identity data, and other illegal goods and services.

The seizure of Nemesis Market was the culmination of Operation Dark Hunt, a coordinated effort by law enforcement agencies in several countries.

The operation involved months of meticulous planning, surveillance, and collaboration between various international cybersecurity units.

Details of the operation remain classified, but sources indicate that combining cutting-edge digital forensics and traditional detective work was vital to infiltrating the market’s defenses.

The breakthrough came when investigators traced transactions to the market’s administrators, leading to their identification and arrest.

According to a recent tweet by Dark Web Informer, the Nemesis Market, one of the top five online marketplaces on the dark web, has been taken down.

The Impact on the Darknet Landscape

The takedown of Nemesis Market sends a powerful message to the darknet community: no entity is beyond the reach of the law.

This operation has significantly disrupted the supply chains of various illegal goods and services, temporarily decreasing their availability on the dark web.

However, experts warn that the void left by Nemesis Market is likely to be filled by other emerging platforms.

The dynamic nature of the darknet means that as one market falls, others rise to take its place.

Law enforcement agencies know this cycle and continuously develop new strategies to combat illegal online trade.

The Future of Cyber Law Enforcement

The successful seizure of Nemesis Market highlights the growing sophistication and international cooperation of cyber law enforcement.

Agencies are increasingly relying on advanced technology and cross-border collaborations to tackle the challenges posed by the darknet.

As the digital landscape evolves, so do the strategies of those operating within it.

The battle against illegal online marketplaces is ongoing, with both sides continuously adapting to the ever-changing environment.

The seizure of Nemesis Market is a significant milestone in the fight against darknet marketplaces.

It demonstrates the effectiveness of international law enforcement cooperation and the importance of staying ahead in the technological arms race against cybercriminals.

While challenges remain, the takedown of Nemesis Market is a testament to the global commitment to combating cybercrime and protecting citizens from the dangers of the dark web. 

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.



[ad_2]

Source link

OnePlus unveils Ace 3V, coming to global markets under a different name

andreasc
-
0
OnePlus unveils Ace 3V, coming to global markets under a different name

[ad_1]

The OnePlus Ace 3V has been announced in its homeland, China. This smartphone is expected to arrive to global markets under a different name, with a ‘Nord’ branding. OnePlus will most likely use the OnePlus Nord 4 naming. There’s a chance the ‘Nord 4’ will be skipped, though, in favor of ‘Nord 5’, as the number 4 is considered to be unlucky in China.

The OnePlus Ace 3V is now official and will launch globally under the ‘Nord’ brand

With that being said, let’s take a closer look at the OnePlus Ace 3V. It has flat sides, with chamfered edges. All of its physical buttons sit on the right-hand side. There is an alert slider on the left, though.

A flat display sits on the front, with thin bezels, which are not uniform. A centered display camera hole is also located on the front. There are two cameras included on the back, and they’re vertically aligned.

Those cameras sit inside the same camera island. It is located in the top-left corner, and it does protrude on the back a bit. OnePlus’ logo is centered on the back side of the phone.

It’s fueled by the all-new Snapdragon 7+ Gen 3 processor

The OnePlus Ace 3V is fueled by the Snapdragon 7+ Gen 3 processor. That chip actually got announced today, in case you were wondering. It’s Qualcomm’s new mid-range processor with a focus on AI.

OnePlus included a 6.74-inch 1.5K AMOLED display here. It supports a 120Hz refresh rate, and its refresh rate goes up to 1,100 nits. This panel is flat.

This smartphone also comes in several variants. It’s available with 12GB and 16GB storage options. The 12GB RAM model includes either 256GB or 512GB of storage, while the 16GB RAM variant is available in a 512GB storage flavor. OnePlus used LPDDR5X RAM and UFS 4.0 flash storage.

A 5,500mAh battery powers this phone, while the OnePlus Ace 3V supports 100W wired charging. The charger is included in the retail box, and will be with the global variant too.

It has two cameras on the back, and Android 14 comes out of the box

A 50-megapixel main camera (Sony’s IMX882 sensor) is backed by an 8-megapixel ultrawide unit (Sony’s IMX355 sensor). A 16-megapixel selfie camera (Samsung’s S5K3P9 sensor) is also a part of the package.

Android 14 comes pre-installed here, with OnePlus’ software on top of it. The device is also IP65-certified for water and dust resistance. OnePlus promises 3 major updates and 4 years of software support for the device. You’ll find a set of stereo speakers here too.

The OnePlus Ace 3V’s pricing starts at CNY1,999 ($278) in China, and goes up to CNY2,599 ($361). The phone comes in black and silver color variants, as you can see below. We’re not sure when will the global variant launch. The OnePlus Nord 3 launched in July last year, so we may have to wait until July 2024.



[ad_2]

Source link

DOJ wants ByteDance to sell TikTok rather than ban it in the US

andreasc
-
0
DOJ wants ByteDance to sell TikTok rather than ban it in the US

[ad_1]

TikTok, the popular social media app that has been criticized for its ties to China, is at risk of being banned outright in the United States. The U.S. House of Representatives already voted in favor of a bill that would require TikTok to be divested to a U.S. company or be banned, and TikTok’s fate now rests with the Senate. But, Department of Justice officials are having secretive meetings this week to help avoid a TikTok ban, according to The Business Times. The DOJ has a clear preference to forcing ByteDance to sell TikTok, rather than banning it altogether.

ByteDance is based in China, and there are concerns that the country’s government could use TikTok to harm the U.S. This could be through collecting data from American users, or by influencing Americans with content shown on TikTok’s “For You” page. Either way, these fears have created tremendous pressure from the U.S. government. Part of the reason that the DOJ wants ByteDance to sell TikTok is due to the app’s data. Chinese laws can force companies to hand over data to the government, and ByteDance could have to comply with a request for data, if asked.

Lisa Monaco, the deputy attorney general, is leading the effort. Additionally, the report notes that lobbying is taking place now. In a shocking twist, there is bipartisan support for action against TikTok. But Monaco believes ByteDance can sell TikTok to avoid a ban. “What we have seen is the asset that is being sought by our adversaries is not the brick-and-mortar institution,” Monaco said, as reported by The Business Times. “The asset is the data itself.”

Will ByteDance sell TikTok after DOJ pressure?

Though the DOJ is lobbying for TikTok to be sold, it’s unlikely. There aren’t major benefits to selling TikTok for ByteDance. The app is used globally, which means U.S. users only make up a small portion of TikTok’s global user base. As such, ByteDance might rather TikTok be banned than be sold. There has been no indication that ByteDance intends to sell TikTok, even after DOJ pressure.

Additionally, leaders at ByteDance and TikTok have maintained that they plan to fight U.S. legal action. If the Senate passes legislation, TikTok and its owner will “exhaust all legal challenges,” according to Bloomberg. Similarly, TikTok has categorically denied the allegations posed by some U.S. lawmakers. The app’s algorithm is not directed by any government, it says. We’ll have to wait and see how the Senate proceeds, but a resolution could be months away.

[ad_2]

Source link

Samsung brings cloud gaming to Galaxy phones with Gaming Hub

andreasc
-
0
Samsung brings cloud gaming to Galaxy phones with Gaming Hub

[ad_1]

Gaming is a big deal on mobile devices, so for tech companies, it is crucial to make the experience as smooth and enjoyable as possible. Some of the best gaming phones come from Samsung’s flagship Galaxy series. Now, the Korean tech giant has announced that its Gaming Hub, formerly known as the Game Launcher app, is getting some new features.Samsung revealed that its Gaming Hub for mobile is expanding its reach to a broader gaming community by offering instant access to games through the cloud gaming-enabled Instant Plays feature, which is currently in beta in the US and Canada.

Samsung is expanding gaming access and fostering growth within its Galaxy ecosystem:

  • The Gaming Hub for mobile now includes Instant Plays, allowing users to instantly access games without installation, enhancing game discoverability.
 

  • Samsung’s cloud platform supports Android APKs, offers a cloud-based attribution solution with major mobile measurement partners, and maintains support for existing in-game monetization models, ensuring seamless integration with game publishers’ operations.
At the yearly Game Developers Conference, Samsung’s Corporate Vice President Jikhan Jung delved deeper into the company’s ongoing advancements in game streaming for both players and partners:

Our vision of Gaming Hub for mobile is to provide an all-in-one gaming platform optimized for Galaxy owners that makes playing and discovering games much easier without downloading and waiting. We continue to listen to the player community, and we know that bringing game streaming with cloud technology to the mobile platform provides a substantial update to the current app store for a more seamless experience.

In 2022, Samsung unveiled the Gaming Hub, an integrated game streaming and discovery platform. Evolving from the Game Launcher feature on Galaxy devices, the Gaming Hub for mobile aligns with Samsung Gaming’s goal to provide users with diverse options for discovering and enjoying their favorite games.

[ad_2]

Source link

Application-Layer Loop DoS Attack – 300,000 Online Systems At Risk

andreasc
-
0
Application-Layer Loop DoS Attack – 300,000 Online Systems At Risk

[ad_1]

Denial-of-service (DoS) attacks are usually exploited by hackers to interrupt regular network and website functioning, with motives of making money or for political reasons or simply to create a mess. 

The websites or networks can be made unavailable through the Denial of Service (DoS) attack method which sends numerous requests for resources and traffic to the system.

Researchers at CISPA Helmholtz-Center for Information Security discovered a new Denial-of-Service attack vector called “Application-layer Loop DoS Attacks.” 

It targets UDP-based application protocols by pairing their servers to communicate indefinitely, affecting both legacy protocols like QOTD, Chargen, and Echo and contemporary ones like DNS, NTP, and TFTP. 

This vulnerability puts an estimated 300,000 Internet hosts and networks at risk of denial-of-service conditions.

Loop DoS Attack

Loop DoS Attack

The newly discovered self-perpetuating DoS loop attack targets application-layer messages by pairing two network services that keep responding indefinitely, creating large traffic volumes resulting in denial of service. 

Once triggered, even attackers cannot stop it. Previously, loop attacks occurred on routing layers with finite iterations. 

This attack by CISPA researchers concerns 300,000 Internet hosts, confirming vulnerabilities in TFTP, DNS, NTP, and six legacy protocols providing basic Internet functionalities like time synchronization, name-to-IP mapping, and unauthenticated file transfer.

Application-layer loop DoS attacks employ IP spoofing, enabling initiation from a single spoofing-capable host. 

For example, attackers could trigger a perpetual loop between two vulnerable TFTP servers by injecting one spoofed error message, causing them to exchange error messages and stress networks between them endlessly. 

These attacks differ from known network-layer loops, bypassing existing packet lifetime checks at that level and representing a novel vector unaddressed by current mitigations.

This novel attack vector is yet to be exploited in the wild, however, Rossow warns that if left unaddressed it could readily be used by malefactors. 

Rossow and Pan reported their discoveries concerning December 2023 to the relevant vendors and a consortium of trusted operators. 

Moreover, CISPA researchers coordinated with The Shadowserver Foundation for an advisory publication and notification campaign on application-layer loop DoS threat.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.



[ad_2]

Source link

Why Browser Security Matters More Than You Think

andreasc
-
0
Why Browser Security Matters More Than You Think

[ad_1]

Why Browser Security Matters More Than You Think

In today’s interconnected world, where our lives revolve around the internet, it’s imperative to understand the importance of browser security. Whether it’s for personal use or professional purposes, web browsers function as our primary gateway to the online world.

Consequently, they also serve as a potential entry point for cyber threats and attacks. In this article, we’ll highlight why browser security matters more than you might think and discuss some essential steps to enhance your online safety.

The Growing Cybersecurity Threat:

It’s no secret that cyber threats have become increasingly sophisticated over the years. Cybercriminals are constantly finding new ways to exploit vulnerabilities in browsers, leaving users vulnerable to privacy breaches, data thefts, and financial frauds.

According to cybersecurity experts, one of the most common tactics used by hackers is cross-site scripting (XSS) attacks. These malicious scripts injected into web pages can compromise users’ sensitive information.

Major Web Browsers Remain At Risk:

While modern web browsers work diligently to enhance their security features, they are not completely immune from threats. Some developers argue that certain browsers are more secure than others due to their built-in security mechanisms. However, critics believe that no browser is entirely invincible. Over time, vulnerabilities may emerge for even the most popular browsers for Windows as hackers adapt and discover new methods of attack.

The Need for Vigilance and Proactive Measures:

Considering the persistent threat surrounding web browsers, users like us must remain proactive with our online safety measures:

1. Keep Your Browser Up-to-Date:

Vendors frequently release security patches and updates for their web browsers as vulnerabilities are discovered and fixed. By regularly updating your browser software, you stay protected against known threats.

2. Enable Automatic Updates:

Enabling automatic updates ensures that you receive critical security updates immediately upon release without any manual intervention.

3. Utilize Browser Extensions with Caution:

Browser extensions can add extra functionality and enhance your browsing experience. However, they may also act as potential gateways for hackers. It’s important to research and use trustworthy extensions from reputable sources.

4. Enable Two-Factor Authentication (2FA):

Activating 2FA adds a layer of security to your user account by requiring you to provide a second form of verification, such as a unique code sent to your mobile device or email.

5. Implement Strong and Unique Passwords:

We’ve heard it countless times, but it bears repeating: strong, complex, and unique passwords are essential. Avoid using easily guessable passwords like consecutive numbers or common phrases. Consider utilizing a password manager to store and generate unique passwords securely.

6. Regularly Clear Browser Cache and Cookies:

Clearing your browser cache and cookies can help protect your privacy and prevent unauthorized access to your online activities.

7. Use Privacy-Focused Browsing Modes:

Most popular web browsers offer private browsing modes that do not retain any browsing history or save cookies upon session closure. Utilize these specialized modes when accessing sensitive information or using public networks.

8. Be Cautious with Downloads:

Exercise caution when downloading files from the internet, particularly those sent by unknown sources. Malware can be disguised within seemingly harmless files, leading to potential security breaches.

Common Mistakes to Avoid:

Despite the importance of browser security, many users make common mistakes that can leave them vulnerable to cyber threats. By avoiding these pitfalls, you can significantly enhance your online safety.

1. Ignoring Updates:

One of the most common mistakes people make is neglecting to update their web browsers. Developers continuously release updates to patch security vulnerabilities and improve overall performance. If you ignore these updates, your browser remains susceptible to attacks targeting known vulnerabilities.

Clicking on suspicious links in emails or on unfamiliar websites can lead to malware infection or phishing attempts. Always be cautious and verify the authenticity of links before clicking on them.

3. Using Weak Passwords Across Multiple Websites:

Using weak passwords that are easy to guess or reusing passwords across multiple websites places all your accounts at risk if one becomes compromised. Implement strong and unique passwords for each online service you use, and consider using a password manager to manage them securely.

Conclusion:

Your browser is more than just a tool for internet navigation; it serves as the gateway between you and the digital world around you – a world teeming with cyber threats desperately seeking gaps in security measures to infiltrate unknowing users’ devices.

By prioritizing browser security, remaining vigilant against emerging threats, and implementing the tips mentioned above, we can significantly reduce our vulnerability to cyber-attacks.

Remember: taking proactive steps towards enhancing browser security today means safeguarding yourself against tomorrow’s evolving risks—a small price for maintaining online safety in an ever-connected world.

  1. Apple Safari Safest, Google Chrome Riskiest Browser
  2. Mullvad VPN and Tor Project Release Mullvad Browser
  3. Brave Browser enters dark web with its own Tor Onion service
  4. Google Incognito Mode: New Disclaimer Reveals Data Tracking
  5. DuckDuckGo Allows Microsoft Trackers Despite No Tracking Policy



[ad_2]

Source link

Galaxy Tab Active 5 Enterprise Edition will get 8 Android updates

andreasc
-
0
Galaxy Tab Active 5 Enterprise Edition will get 8 Android updates

[ad_1]

The enterprise edition of Samsung’s Galaxy Tab Active 5 will get updates for eight years, a company executive revealed on LinkedIn. Not only security patches, but the device will also receive eight major Android OS updates during this time. The standard version of the newly launched rugged tablet is eligible for four major OS updates and five years of security patches.

Samsung promises eight years of updates for the Galaxy Tab Active 5

Samsung‘s enterprise edition Galaxy devices are aimed at business customers. These products come with additional software solutions and dedicated support channels so businesses can get more out of them. The company has always offered better update support to these devices. They get regular OS and security updates, often more frequently and longer than standard versions.

However, until recently, the longest guaranteed support for any Galaxy smartphone or tablet was five years. Most Samsung products launched since 2021 get four major Android OS updates and five years of security patches, including enterprise editions. Starting with the Galaxy S24 series, the company extended support to seven years for flagship models.

The new flagships debuted with Android 14 and will get OS updates up to Android 21 and security patches till 2031. No other Galaxy device was covered under the updated policy. That’s changing on the enterprise side of things. While the enterprise edition of the Galaxy S24 is still limited to seven years of updates, the Galaxy Tab Active 5 will get updates for eight years.

This means the new tablet will remain secure till 2032 and receive new features until Android 22. The enterprise edition of the Galaxy Xcover 7, a rugged smartphone launched alongside the Galaxy Tab Active 5 in January, will get seven years of OS and security updates. Like the tablet, its standard version is eligible for only four OS updates and five years of security patches.

The tablet can run without a battery

Samsung’s Active series tablets feature a ruggedized build, S Pen support, and a removable battery. With the Galaxy Tab Active 5, the company introduced a No Battery Mode that allows it to run without a battery. It directly sends the power to the device, bypassing the battery. This enables businesses to use the tablet in kiosks with an uninterrupted power supply.

With fewer charge and discharge cycles, the battery’s health will be preserved in the long run. After all, Samsung has promised eight years of updates for the Galaxy Tab Active 5 Enterprise Edition. The company may introduce enterprise editions of more Galaxy devices in the coming months. If history is any indication, the Galaxy A55 should get one. All previous models in the lineup have enterprise versions.

[ad_2]

Source link

Discount: Meta could lower the monthly subscription fee by almost 50% to €5.99

andreasc
-
0
Discount: Meta could lower the monthly subscription fee by almost 50% to €5.99

[ad_1]

Facebook and Instagram parent company – Meta – has proposed to reduce its subscription fee for ad-free versions of the social media apps in Europe by almost 50%, (going to €5.99/month from €9.99/month).

The decision comes amid criticisms of forcing Meta users to pay for privacy through its no-ads service, introduced to comply with the Digital Markets Act (DMA) and EU privacy laws last Fall.

In 2023, Meta unveiled a subscription service for Facebook and Instagram in the EU, EEA, and Switzerland, offering users an ad-free experience to align with EU regulations. This service prevents user data from being utilized for advertising purposes.

Reuters reports what Meta lawyer Tim Lamb told a European Commission hearing:

We have wanted to accelerate that process for some time because we need to get to a steady state … so we have offered to drop the price from 9.99 to 5.99 for a single account and 4 euros for any additional accounts. That is by far the lowest end of the range that any reasonable person should be paying for services of this quality. And I think that is a serious offer. The regulatory uncertainty at the moment is out there, and it needs to settle down quickly.

Austrian privacy activist Max Schrems said the issue is not about the fee: “We know from all research that even a fee of just 1.99 euros or less leads to a shift in consent from 3-10% that genuinely want advertisements to 99.9% that still click yes. The GDPR requires that consent must be ‘freely’ given,” he said.

“In reality, it is not about the amount of money – it is about the ‘pay or okay’ approach as a whole. The entire purpose of ‘pay or okay’ is to get users to click on okay, even if this is not their free and genuine choice. We do not think the mere change of the amount makes this approach legal.”

Companies risk fines of as much as 10% of their annual global turnover for DMA breaches.

[ad_2]

Source link

Microsoft Warns of New Tax Returns Phishing Scams Targeting You

andreasc
-
0
Microsoft Warns of New Tax Returns Phishing Scams Targeting You

[ad_1]

Beware Tax Phishing This Season: Microsoft Reveals New Scams Targeting You

New and sophisticated tax phishing scams are targeting taxpayers, warns Microsoft. These scams impersonate trusted sources and use urgency tactics to steal personal and financial data.

Taxpayers beware! Phishing scams are on the rise again as tax season heats up. Microsoft Threat Intelligence has issued warnings about new and innovative tactics cybercriminals are using to steal your personal information and financial data.

These scams don’t discriminate, but they do target specific groups more heavily. New taxpayers, recent immigrants with green cards, small business owners who file themselves, and older adults are all prime targets because they might be less familiar with tax procedures.

It is also worth noting that these threat actors are getting more sophisticated too. They’re impersonating trusted sources like employers, tax agencies, and even payment processors. They might send emails with blurry or incomplete tax documents to create a sense of urgency and trick you into clicking on a malicious attachment.

These attachments, as per Microsoft Threat Intelligence’s blog post, contain malware that steals your login credentials, or they might redirect you to a fake website that looks like a legitimate tax platform designed to capture your information.

One example scam identified in January involved emails that appeared to be from employers sending tax documents. Clicking on the attached HTML file led to a fake landing page designed to steal the user’s login credentials.

Beware Tax Phishing This Season: Microsoft Reveals New Scams Targeting You
Screenshot via Microsoft Threat Intelligence

Tycoon and NakedPages – PhaaS

In addition to their blog post, Microsoft Threat Intelligence has also sent out a series of tweets addressing the increasing prevalence of phishing campaigns during the tax season in the United States.

These campaigns, including those associated with notorious phishing-as-a-service (PhaaS) platforms like Tycoon and NakedPages, are leveraging tax-related themes for social engineering tactics, putting individuals and organizations at risk of financial fraud and data theft.

One notable campaign tied to the Tycoon PhaaS platform involved deceptive emails posing as official tax forms such as W-2 and W-9 notifications, alongside other payroll tax documents.

These emails featured HTML attachments that initiated a Cloudflare captcha check, ultimately leading victims to a phishing page designed to harvest sensitive information. When recipients opened these attachments, JavaScript scripts were executed, facilitating the installation of info-stealing malware.

Additionally, Microsoft observed phishing efforts linked to the AiTM phishing kit NakedPages, where fraudulent emails disguised as DocuSign-shared documents about tax adjustments were circulated. Clicking on embedded images within these emails triggered redirections culminating in phishing pages, demonstrating the sophisticated nature of these attacks.

This malicious software is designed to harvest sensitive data, including cryptocurrency wallet information, login credentials for PuTTY and WinSCP, as well as credentials stored in web browsers and email clients. Such comprehensive data theft poses significant risks to individuals and organizations, potentially resulting in financial losses and compromised digital identities.

Screenshot via Microsoft Threat Intelligence

Both Tycoon and NakedPages are recognized for their automation capabilities in executing phishing activities, as well as their ability to bypass multi-factor authentication (MFA) through adversary-in-the-middle (AiTM) techniques, strengthening the threat posed by these campaigns.

Microsoft recommends staying alert throughout tax season. Don’t click on suspicious links or attachments in emails, even if they seem to come from a familiar source. If you’re unsure about the legitimacy of an email, contact the sender directly through a verified phone number or website.

You can find more resources and tips for staying safe from tax season scams by searching for the “Microsoft Threat Intelligence tax season report.”

  1. IRS tax forms W-9 email scam drops Emotet malware
  2. New Ransomware Email Scam Using FBI and IRS as Bait
  3. Security Breach Rattles IRS, 334,000 Tax Payers Data Stolen
  4. US Citizens Hit by Ransomware via Fake IRS Tax Return Emails
  5. Thanks IRS for poor security: Data On 100,000 Taxpayers Stolen



[ad_2]

Source link

1...311312313...1,492Page 312 of 1,492