A new phishing campaign is targeting Google Ads users by tricking them into entering their login details on fraudulent websites. The attackers use Google Ads to display fake ads that look like legitimate Google login pages. When users click on these ads, they are redirected to fake sites designed to steal their login credentials and two-factor authentication codes.

Cybersecurity experts from Malwarebytes revealed that the goal of the attack is to hijack Google Ads accounts, using...

Apple has agreed to pay $95 million to settle a class action lawsuit that accused the company of invading users' privacy through its voice-activated assistant, Siri.

This settlement affects U.S.-based individuals who either currently own or have owned a device with Siri (such as an iPhone, iPad, Apple Watch, MacBook, iMac, HomePod, iPod touch, or Apple TV) and whose private voice conversations were unintentionally captured by Siri and shared with third parties. This could have...

A new security breach has affected over 2.6 million Chrome users through popular browser extensions. Attackers tricked extension developers with a fake email, convincing them to grant special permissions to a malicious app. Once approved, the attackers added harmful code to trusted extensions, allowing them to steal personal data like login details and browsing information.

The first sign of the attack came from cybersecurity firm Cyberhaven, whose employee was...

Belgian and Dutch authorities have arrested eight suspects linked to a "phone phishing" gang that targeted victims across at least ten European countries. The operation, coordinated by Europol and Eurojust on December 6, 2024, involved 17 searches in Belgium and the Netherlands, resulting in the seizure of cash, firearms, luxury watches, jewelry, and electronic devices. The suspects, aged 23 to 66 and based mainly in Rotterdam and Almere, impersonated police officers or bank staff to...

Cybersecurity researchers have warned about a new phishing attack that uses corrupted Microsoft Office files and ZIP archives to bypass email security. According to ANY.RUN, this attack evades antivirus software, prevents files from being analyzed in secure environments (like sandboxes), and gets past Outlook's spam filters, allowing harmful emails to reach your inbox. The attack involves sending emails with intentionally damaged attachments, such as ZIP files or Office documents, which...

The North Korea-linked hacker group Sapphire Sleet is believed to have stolen over $10 million in cryptocurrency through social engineering attacks over six months. Microsoft found that multiple North Korean groups were using fake LinkedIn profiles, posing as recruiters or job seekers to scam people and fund the regime.

Active since at least 2020, Sapphire Sleet shares ties with other hacking groups like APT38 and BlueNoroff. In November 2023, Microsoft revealed the group set up fake...