Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

18 clusters · 78 sources · 30 days · First seen about 1 month ago · Last updated 2 days ago

Digital fraud and evolving cybersecurity risks

Overview

Authorities and cybersecurity experts continue to warn of evolving digital fraud schemes that prioritize psychological manipulation over technical banking vulnerabilities. Criminals frequently use digital channels to perform classic scams, tricking individuals into surrendering sensitive credentials or tokens. Recent trends show a strategic shift toward using stolen legitimate credentials to evade security controls, with password guessing accounting for 34.8% of detected attack indicators according to Kaspersky.

Newer tactics include smishing—fraudulent text messages—targeting users of major platforms like Netflix, Amazon, and Facebook. These scams utilize urgent, false security alerts regarding unauthorized account access to induce panic, directing victims to fake websites designed to harvest usernames and passwords.

In response to these rising threats, consumer protection organizations are promoting preventative measures such as two-factor authentication, complex passwords, and VPNs. In Germany, the Verbraucherzentrale has introduced digital tools to assist consumers, including a ‘Fakeshop-Finder’ to analyze the legitimacy of online retailers and a ‘Fake-Check Geldanlage’ to help identify high-risk investment offers, such as fraudulent trading platforms or suspicious crypto-investments.

Technical vulnerabilities also persist in payment methods. The Central Bank of Chile has highlighted increased risks for debit cards, noting they offer a minimal margin for reaction compared to credit cards because funds are drawn directly from accounts. Furthermore, ESET researcher Mario Micucci warns that generative AI is making digital evidence, such as screenshots, increasingly unreliable. As attackers bypass traditional methods, the industry is seeing a rise in ‘Phishing-as-a-Service’ and ‘quishing’ (QR code phishing).

Entities

Group-IB · Mario Micucci · ESET · Kaspersky · SpyNote

Claims

What the coverage asserts, and how many sources carry each claim.

[● 4 SOURCES] Cybercriminals are using psychological manipulation to steal sensitive data.
[● 4 SOURCES] Scammers send messages impersonating known companies regarding deliveries, pending payments, or account issues.
[● 4 SOURCES] Fraudulent links in messages lead to fake pages designed to steal user data.
[● 4 SOURCES] Criminals use phone calls to impersonate bank or company employees to request security codes.
[● 4 SOURCES] Fraudulent links in messages can lead to fake pages designed to steal user data.
[● 4 SOURCES] Legitimate banks and companies do not request full passwords or security codes via unexpected calls.
[● 3 SOURCES] The ‘Request Payment’ feature was designed for easy money requests between users but is being exploited by scammers as a ‘deposit trap’.
[● 3 SOURCES] Victims are increasingly reporting similar fraud incidents on social media platforms.
[● 3 SOURCES] Scammers target individuals listing vehicles or real estate for sale or rent online.
[● 3 SOURCES] Fraudsters pose as government officials working out of town to establish trust with victims.
[● 3 SOURCES] When the victim approves the notification, money is transferred from the victim's account to the fraudster.
[● 2 SOURCES] The scam involves the fraudster entering the victim's own IBAN into the ‘Request Payment’ field instead of their own.

Timeline

2 days ago

[TECHNOLOGY] 2 sources
Cybersecurity alert: Smishing scams targeting major online accounts
Cybercriminals are using smishing scams to steal credentials from Netflix, Amazon, and Facebook users via fake security alerts sent through text messages.
7 days ago

[TECHNOLOGY] 2 sources
Greek Cyber Security Center warns of sophisticated digital fraud
The Greek Cyber Security Center warns of increasingly sophisticated digital fraud, noting that AI is enhancing the effectiveness of phishing, smishing, and social engineering attacks.
7 days ago

[TECHNOLOGY] 6 sources
Digital security: Tools and tips to combat rising online fraud
Experts and consumer protection agencies are providing tools and advice to combat rising digital threats, including phishing, fake online shops, and fraudulent investment schemes.
11 days ago

[TECHNOLOGY] 2 sources
Cybercriminals use QR code phishing to target banking data
Criminals are using ‘quishing’—phishing via QR codes—to redirect users to fake banking and payment sites to steal sensitive data and credentials.
15 days ago

[TECHNOLOGY] 4 sources
Cybersecurity experts warn of rising digital fraud and credential theft
Cybersecurity firms ESET and Kaspersky warn of rising digital risks, including the ease of forging screenshots via AI and the increasing effectiveness of credential theft and password guessing attacks.
17 days ago

[TECHNOLOGY] 2 sources
Android NFC attacks increase by 188% due to WindRelay malware
Android users face a 188% increase in NFC-based attacks, driven by the WindRelay malware which intercepts real-time bank card data via social engineering and SpyNote spyware.
17 days ago

[TECHNOLOGY] 4 sources
ESET warns of rising quishing attacks using QR codes
ESET warns of rising ‘quishing’ attacks, where criminals use QR codes to hide malicious links and bypass security filters by moving interactions to personal mobile devices.
20 days ago

[TECHNOLOGY] 3 sources
ESET warns of rising ‘quishing’ attacks using malicious QR codes
Cybercriminals are using ‘quishing’—phishing via QR codes—to bypass corporate security filters and target employees' mobile devices, according to ESET.
21 days ago

[TECHNOLOGY] 3 sources
Cybersecurity researchers identify new macOS and Android malware threats
New malware threats have been identified targeting macOS via AmnesiaStealer and Android via a WindRelay and SpyNote combination used in NFC-based payment fraud.
22 days ago

[CRIME] 3 sources
Digital fraud waves target motorists and banking users in Denmark and Norway
New digital fraud waves are targeting motorists in Denmark with fake parking fines and Norwegian citizens through sophisticated screen-sharing scams designed to bypass traditional banking security.
24 days ago

[TECHNOLOGY] 6 sources
Cybercriminals target young adults through institutional impersonation
Cybercriminals are increasingly targeting young adults by impersonating public institutions via SMS and calls, often exploiting a false sense of digital confidence to steal data and funds.
24 days ago

[TECHNOLOGY] 5 sources
Digital payment fraud rises as debit cards face higher risks
Digital fraud is rising, with debit cards identified as high-risk due to direct fund access. Experts advise immediate card blocking and formal claims to mitigate losses from unauthorized transactions.
25 days ago

[TECHNOLOGY] 3 sources
Cybersecurity experts warn of new NFC-based banking fraud
Cybersecurity experts warn of a new NFC relay attack where scammers use social engineering and malicious apps to steal contactless bank card data in real time.
26 days ago

[TECHNOLOGY] 2 sources
Android malware uses SpyNote and WindRelay to steal credit card data
Group-IB researchers discovered a new Android malware attack using SpyNote and WindRelay to steal credit card data via NFC and remote access during fraudulent phone calls.
27 days ago

[TECHNOLOGY] 3 sources
Cybersecurity experts warn of rising phishing and NFC-based mobile payment fraud
Cybercriminals are deploying advanced phishing-as-a-service tools and specialized NFC relay malware to bypass authentication and steal payment card data, targeting both corporations and individuals.
29 days ago

[TECHNOLOGY] 12 sources
Cyber fraud tactics rise in Turkey targeting banking and government services
Cybercriminals are using sophisticated phishing, fake government websites, and banking 'payment request' features to defraud citizens in Turkey, particularly during real estate and vehicle transactions.
about 1 month ago

[TECHNOLOGY] 4 sources
Cybersecurity experts warn of evolving digital scams and payment risks
Cybersecurity experts warn that digital scams often target human trust rather than technical systems, noting that recovery of stolen funds depends heavily on whether credit cards or transfers were used.
about 1 month ago

[TECHNOLOGY] 5 sources
Cybercriminals deploy WhatsApp and parking fee phishing scams
Scammers are using fake WhatsApp notifications and fraudulent parking fee SMS messages to steal money and personal data through phishing links and urgent social engineering tactics.

Sources

20minutos.es · ad-hoc-news.de · akeza.net · aksam.com.tr · baargaal.net · beobachter.ch · bild.de · biz.cafef.vn · borncity.com · brasilemfolhas.com · cfoworld.cz · clicnoticias.com.mx · consumotic.mx · courage-online.de · ct24.cz · cybersecuritynews.es · cysnews.cz · dagens.no · diariodelcauca.com.co · diariodelsur.com.co · diebewertung.de · dinero.com.sv · dobreprogramy.pl · donostitik.com · ebizlatam.com · elperiodicodeportivo.com.co · empresariodigitalnic.com · eurodressage.com · extra.com.co · fayerwayer.com · gamepro.de · gazetedamga.com.tr · haber1.com · infoplatense.com.ar · informacija.rs · interempresas.net · it-boltwise.de · kenh14.vn · komputer.no · laprensadeguatemala.com · laquotidienne.fr · laregionenlinea.com.mx · launion.net · m.haber7.com · makthes.gr · marquesina.mx · mediosrioja.com.ar · medium.seznam.cz

This summary has been updated 22 times: see revision history