Scams

Scammers Impersonating The IRS Threaten Victims With Legal Action Aggressive scammers are impersonating the U.S. Internal Revenue Service (IRS) in e-mails designed to trick potential victims into paying fabricated outstanding amounts related to missed or late payments. The phishing emails target users of Microsoft’s Office 365 platform and have so far Read more…

Malicious NPM Project Steals Discord Accounts, Browser Info A heavily obfuscated and malicious NPM project is used to steal Discord user tokens and browser information from unsuspecting users. NPM is a JavaScript package manager that allows developers to download and integrate different JS modules from a public registry containing over Read more…

HMRC Smishing Tax Scam Targets UK Banking Customers An advanced HM Revenue and Customs (HMRC) tax rebate scam is targeting UK residents this week via text messages (SMS). The smishing campaign is concerning as it employs multiple HMRC phishing domains and tactics, with new domains added every day as older ones get flagged by spam filters. Not only do the Read more…

How Ryuk Ransomware Operators Made $34 Million From One Victim One hacker group that is targeting high-revenue companies with Ryuk ransomware received $34 million from one victim in exchange for the decryption key that unlocked their computers. The threat actor is highly proficient at moving laterally inside a compromised network Read more…

New Pay2Key Ransomware Encrypts Networks Within One Hour A new ransomware called Pay2Key has been targeting organizations from Israel and Brazil, encrypting their networks within an hour in targeted attacks still under investigation. Michael Gillespie, the creator of ID Ransomware, has also seen submissions from Pay2Key victims predominantly from Brazilian IP Read more…

QBot Phishing Lures Victims Using US Election Interference Emails The malspam emails recently spotted by Malwarebytes Labs’ Threat Intelligence Team are camouflaged as replies in previously stolen email threads, a tactic used to add legitimacy in the targets’ eyes. Each of the phishing messages come with malicious Excel spreadsheet attachments Read more…

Scam PSA: Ransomware Gangs Don’t Always Delete Stolen Data When Paid Ransomware gangs are increasingly failing to keep their promise to delete stolen data after a victim pays a ransom. In 2019, the Maze ransomware group introduced a new tactic known as double-extortion, which is when attackers steal unencrypted files and then threaten Read more…

Someone Just Emptied Out A $1 Billion Bitcoin Wallet A password-protected Bitcoin wallet with almost $1 billion in cryptocurrency has just been emptied out. Mystery surrounds this suspicious transaction and the party who finally managed to cash out the big fat amount. Was it the owner themselves, or did someone crack this wallet? Bitcoins withdrawn from Read more…