Researchers from Kaspersky Lab have discovered “AlbaBotnet”, an emerging botnet that appears to be gearing up to inflict financial damage on accounts hosted at banks in Chili.
When it comes to phishing attacks, it appears Web browsers are doing a better job detecting and blocking them than security suites, according to a new report.
Researchers from RSA have identified a new phishing technique called "Bouncer list phishing" which targets a very specific group of victims in targeted attacks.
Metasploit Pro 4.5 brings capabilities that let organizations simulate social engineering attacks and help understand just how vulnerable they may be to phishing attacks.
WHOIS data has been a longtime source of controversy for ICANN - from concerns about threats to free speech to worries cybercriminals profit from the anonymity afforded by lax enforcement of rules around the data's accuracy. ICANN however, is trying to turn a corner.
A mathematician, examining a job pitch from Google, discovered a flaw in DKIM, which led him to discover that Google, Yahoo, Microsoft, and several other domains were vulnerable to DKIM spoofing.
The semiannual “Global Phishing Survey” from the Anti-Phishing Working Group (APWG) provides powerful insight into what is happening in phishing worldwide.
Cooperation in the underground economy could enable a fraudster in Russia who masters the art of phishing to team up with another fraudster who already has the infrastructure of cashing out compromised online banking accounts of US banks.
Businesses usually don’t think about social engineering when securing company data. It used to be believed that social engineering was reserved for governments and organizations with enemies. That's not the case anymore.
Domain name typo squatting, a decade-old headache for marketing and legal departments, is putting corporate data at risk. But evidence suggests that it is becoming a risk that also needs to be on the CSO's radar.
Cybercriminals have enough information to construct highly targeted phishing attacks. So, how can you mitigate the risk of falling victim to spear-phishing attacks?
Unlike real-world dumpster diving, "electronic dumpster diving" can enable cybercriminals to access all the documents currently held by the user, not just those that were thrown away.