Category: Social Engineering
-
Fake “Customer Support Chat” Pop-Ups Used to Gain Remote Access
Threat Level: 🔴 HighThreat Type: Social Engineering / Tech Support Scam What’s Happening Cybersecurity researchers are warning about a growing scam involving fake customer support chat pop-ups on websites. These pop-ups appear while browsing and claim to be official support agents from companies like Microsoft, Apple, or antivirus providers. The message often warns of a…
-
“USB Drive Delivery” Scam Sends Malware to Victims
Threat Level: 🔴 HighThreat Type: Malware / Social Engineering What’s Happening Cybersecurity experts are warning about a growing scam where victims receive unexpected USB drives in the mail claiming to be from a company, event organizer, or even internal IT departments. The package often includes a note encouraging the recipient to plug the USB drive…
-
Fake “Security Update Required” Pop-Ups Used to Install Malware
Threat Level: 🔴 HighThreat Type: Malware / Social Engineering What’s Happening Cybersecurity researchers are warning about a surge in fake “security update required” pop-ups appearing while users browse the web. These pop-ups claim that the user’s system, browser, or antivirus software is out of date and must be updated immediately. According to reporting from BleepingComputer,…
-
Fake “Two-Factor Authentication” Prompts Used to Approve Attacker Logins
Threat Level: 🔴 HighThreat Type: Phishing / MFA Fatigue Attack What’s Happening Cybersecurity researchers are warning about a rise in attacks known as “MFA fatigue” or “push bombing.” In this scam, attackers attempt to log in to a victim’s account using stolen credentials and repeatedly trigger two-factor authentication (2FA) approval requests. Victims receive multiple login…
-
Hackers Using Fake Zoom and Teams Calls to Install Malware
Threat Level: 🔴 HighThreat Type: Social Engineering / Malware What’s Happening Cybersecurity researchers are warning about a growing attack method where hackers impersonate coworkers or IT staff and invite victims to fake Zoom or Microsoft Teams meetings. During the call, the attacker convinces the victim to install a “required update,” troubleshooting tool, or meeting plugin.…