Battle with Bots Prompts Mass Purge of Amazon, Apple Employee Accounts on LinkedIn

Credit to Author: BrianKrebs| Date: Thu, 20 Oct 2022 17:07:34 +0000

On October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc. The next day, half of those profiles no longer existed. A similarly dramatic drop in the number of LinkedIn profiles claiming employment at Amazon comes as LinkedIn is struggling to combat a significant uptick in the creation of fake employee accounts that pair AI-generated profile photos with text lifted from legitimate users.

Read more

Bogus job offers hide trojanised open-source software

Categories: News

Tags: malware

Tags: ZINC

Tags: microsoft

Tags: infection

Tags: C&C

Tags: open source

Tags: job offer

Tags: fake

Tags: LinkedIn

A North Korean ZINC group is accused of creating compromised versions of KiTTY, PuTTY, TightVNC, and other popular open-source software apps

(Read more…)

The post Bogus job offers hide trojanised open-source software appeared first on Malwarebytes Labs.

Read more

Fake CISO Profiles on LinkedIn Target Fortune 500s

Credit to Author: BrianKrebs| Date: Thu, 29 Sep 2022 20:52:43 +0000

Someone has recently created a large number of fake LinkedIn profiles for Chief Information Security Officer (CISO) roles at some of the world’s largest corporations. It’s not clear who’s behind this network of fake CISOs or what their intentions may be. But the fabricated LinkedIn identities are confusing search engine results for CISO roles at major companies, and they are being indexed as gospel by various downstream data-scraping sources.

Read more

Binance chief says a “sophisticated hacking team” turned him into a deepfake hologram

Categories: News

Tags: Deepfake

Tags: fake

Tags: binance

Tags: cryptocurrency

Tags: Linkedin

Tags: scam

Tags: Zoom

Tags: meeting

Tags: call

Tags: fake

We take a look at reports of a Deepfake hologram getting up to no good in bogus cryptocurrency Zoom calls.

(Read more…)

The post Binance chief says a “sophisticated hacking team” turned him into a deepfake hologram appeared first on Malwarebytes Labs.

Read more

Twilio breached after social engineering attack on employees

Categories: News

Categories: Social engineering

Tags: Twilio

Tags: text messages

Tags: sso

Tags: okta

Tags: linkedin

Twilio says it has fallen victim to a breach after an attacker sent text messages to a large number of employees.

(Read more…)

The post Twilio breached after social engineering attack on employees appeared first on Malwarebytes Labs.

Read more

A week in security (June 20 – June 26)

Credit to Author: Malwarebytes Labs| Date: Mon, 27 Jun 2022 09:30:06 +0000

The most important and interesting computer security stories from the last week.

The post A week in security (June 20 – June 26) appeared first on Malwarebytes Labs.

Read more

Fighting Fake EDRs With ‘Credit Ratings’ for Police

Credit to Author: BrianKrebs| Date: Wed, 27 Apr 2022 14:27:35 +0000

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don’t tell that to Matt Donahue, a former FBI agent who recently quit the agency to launch a startup that aims to help tech companies do a better job screening out phony law enforcement data requests — in part by assigning trustworthiness or “credit ratings” to law enforcement authorities worldwide.

Read more