Fraudsters Sending Email, SMS Messages Linked to Tech Support Scams Hosted on the Cloud
Digital fraudsters are sending out emails and SMS messages that link to tech support scams hosted on popular cloud platforms.
New Reverse Proxy Tool Can Bypass Two-Factor Authentication and Automate Phishing Attacks
A new reverse proxy tool called Modlishka can easily automate phishing attacks and bypass two-factor authentication (2FA) — and it's available for download on GitHub.
GPlayed Android Trojan Imitates Google Apps to Spy On and Steal Data From Victims
Researchers uncovered an adaptable Android Trojan known as GPlayed that masquerades as Google Apps to spy on and steal information from victims.
How a 40-Year-Old Mobile Security Flaw Puts Consumers at Risk
A decades-old mobile security flaw resurfaced in recent weeks after a U.S. senator reported that cybercriminals exploited the Signaling System 7 (SS7) protocol to breach a mobile carrier.
Google Advances Two-Step Verification
Google is changing how it does two-step verification by replacing one-time SMS codes with new features and login protocols.
What’s Wrong With SMS Authentication? Two IBM Experts Weigh In on the NIST Recommendation
IBM experts Dustin Hoff and Ashish Malhotra discussed ways for businesses and end users to mitigate security issues stemming from SMS authentication.
Venmo Wallet Can Be Drained by SMS Use
A security researcher recently discovered how the popular mobile wallet Venmo can be hacked using SMS text messages and certain iOS quirks.
New SMS Phishing Campaigns Spotted: Attackers Bobbing for Apples?
The latest targets of SMS phishing are iOS users. In fact, more than 7,500 users who clicked on a malicious link fell victim to a recent smishing attack.
SMS Two-Factor Authentication: Time to Trash the Text?
Just like software or network defense, cybercriminals have found ways to circumvent and compromise SMS two-factor authentication.
Is Your Risk Engine Shortsighted? Improve Its Vision With a Holistic View
A firm can face a malware breach if its risk engine does not see every stage of an attack, as one bank recently discovered.