Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

26 clusters · 110 sources · 72 days · First seen 3 months ago · Last updated 6 days ago

Evolving digital fraud and cybersecurity risks

Overview

Authorities and cybersecurity experts continue to warn of evolving digital fraud schemes that prioritize psychological manipulation over technical vulnerabilities. Criminals frequently use digital channels to perform classic scams, tricking individuals into surrendering sensitive credentials or tokens. Recent trends show a strategic shift toward using stolen legitimate credentials to evade security controls, with password guessing accounting for 34.8% of detected attack indicators according to Kaspersky.

Newer tactics include smishing—fraudulent text messages—targeting users of major platforms like Netflix, Amazon, and Facebook. In Denmark, motorists have been targeted by SMS campaigns impersonating the Copenhagen Municipality regarding unpaid parking fines. In Norway, scammers impersonate services like PayPal to persuade victims to download screen-sharing applications, such as AnyDesk or TeamViewer, to facilitate unauthorized transfers via Apple Pay. Similarly, Apple users have been cautioned against FaceTime scams where fraudsters impersonate bank officials to monitor screens in real-time.

‘Quishing’ (QR code phishing) remains a frequent method for stealing credentials. ESET reports that malicious QR codes account for approximately 11% of detected phishing emails, often bypassing corporate filters by shifting interactions from protected computers to personal mobile devices. This threat has expanded into physical environments; fraudulent stickers have been discovered on parking meters in Bruges, the Netherlands, and most recently on parking pillars in Thun, Switzerland.

Additionally, researchers have identified specialized malware threats, including AmnesiaStealer for macOS and WindRelay for Android, which can intercept NFC payments. The rise of generative AI has further escalated risks by enabling the mass production of convincing forgeries and personalized messages.

Entities

Group-IB · ESET · Android · Mario Micucci · Kaspersky

Claims

What the coverage asserts, and how many sources carry each claim.

[● 4 SOURCES] Cybercriminals are using psychological manipulation to steal sensitive data.
[● 4 SOURCES] Scammers send messages impersonating known companies regarding deliveries, pending payments, or account issues.
[● 4 SOURCES] Fraudulent links in messages lead to fake pages designed to steal user data.
[● 4 SOURCES] Criminals use phone calls to impersonate bank or company employees to request security codes.
[● 4 SOURCES] Fraudulent links in messages can lead to fake pages designed to steal user data.
[● 4 SOURCES] Legitimate banks and companies do not request full passwords or security codes via unexpected calls.
[● 3 SOURCES] The ‘Request Payment’ feature was designed for easy money requests between users but is being exploited by scammers as a ‘deposit trap’.
[● 3 SOURCES] Victims are increasingly reporting similar fraud incidents on social media platforms.
[● 3 SOURCES] Scammers target individuals listing vehicles or real estate for sale or rent online.
[● 3 SOURCES] Fraudsters pose as government officials working out of town to establish trust with victims.
[● 3 SOURCES] When the victim approves the notification, money is transferred from the victim's account to the fraudster.
[● 2 SOURCES] The scam involves the fraudster entering the victim's own IBAN into the ‘Request Payment’ field instead of their own.

Timeline

6 days ago

[CRIME] 2 sources
Thun authorities warn of fraudulent QR codes on parking pillars
Thun authorities are warning drivers about fraudulent QR code stickers on parking pillars used to steal credit card data via fake payment websites.
13 days ago

[CRIME] 2 sources
Quishing scams target parking meters via fraudulent QR codes
Criminals are using ‘quishing’—fraudulent QR code stickers on parking meters—to steal banking data, leading to both financial theft and unpaid parking fines.
20 days ago

[TECHNOLOGY] 3 sources
Quishing fraud uses manipulated QR codes to steal data
Criminals are using ‘quishing’—fraudulent QR codes—to steal banking and personal data by mimicking legitimate services at parking meters, charging stations, and restaurants.
27 days ago

[TECHNOLOGY] 2 sources
Cybersecurity experts warn of mobile scams via Google Play and system ads
CERT Polska and ESET warn of new mobile scams using malicious Google Play apps and fake system ads to steal data and trigger unauthorized SMS and carrier billing charges.
28 days ago

[TECHNOLOGY] 4 sources
Cybercriminals use QR code phishing to steal banking data
Cybercriminals are using ‘quishing’—fraudulent QR codes—to redirect users to fake websites and steal banking data, particularly via stickers placed over legitimate codes on parking meters and charging stations.
about 1 month ago

[CRIME] 17 sources
LKA reports rise in financial fraud via WhatsApp and Telegram groups
The LKA in Düsseldorf reports a rise in financial fraud via WhatsApp and Telegram, where scammers use fake chat participants to lure victims into fraudulent investments.
about 1 month ago

[TECHNOLOGY] 5 sources
HP warns of AI-driven cryptocurrency theft and QR code phishing
HP's Threat Insights Report warns of new cyberattacks using fake AI trading agents to steal cryptocurrency and QR code phishing to bypass computer security by targeting mobile devices.
about 2 months ago

[TECHNOLOGY] 2 sources
Smartphone users warned of sophisticated Android and Apple scams
Cybercriminals are targeting Android and Apple users through malicious apps and FaceTime screen-sharing scams to steal banking and personal data.
about 2 months ago

[TECHNOLOGY] 2 sources
Cybersecurity alert: Smishing scams targeting major online accounts
Cybercriminals are using smishing scams to steal credentials from Netflix, Amazon, and Facebook users via fake security alerts sent through text messages.
about 2 months ago

[TECHNOLOGY] 2 sources
Greek Cyber Security Center warns of sophisticated digital fraud
The Greek Cyber Security Center warns of increasingly sophisticated digital fraud, noting that AI is enhancing the effectiveness of phishing, smishing, and social engineering attacks.
about 2 months ago

[TECHNOLOGY] 6 sources
Digital security: Tools and tips to combat rising online fraud
Experts and consumer protection agencies are providing tools and advice to combat rising digital threats, including phishing, fake online shops, and fraudulent investment schemes.
about 2 months ago

[TECHNOLOGY] 2 sources
Cybercriminals use QR code phishing to target banking data
Criminals are using ‘quishing’—phishing via QR codes—to redirect users to fake banking and payment sites to steal sensitive data and credentials.
2 months ago

[TECHNOLOGY] 4 sources
Cybersecurity experts warn of rising digital fraud and credential theft
Cybersecurity firms ESET and Kaspersky warn of rising digital risks, including the ease of forging screenshots via AI and the increasing effectiveness of credential theft and password guessing attacks.
2 months ago

[TECHNOLOGY] 2 sources
Android NFC attacks increase by 188% due to WindRelay malware
Android users face a 188% increase in NFC-based attacks, driven by the WindRelay malware which intercepts real-time bank card data via social engineering and SpyNote spyware.
2 months ago

[TECHNOLOGY] 4 sources
ESET warns of rising quishing attacks using QR codes
ESET warns of rising ‘quishing’ attacks, where criminals use QR codes to hide malicious links and bypass security filters by moving interactions to personal mobile devices.
2 months ago

[TECHNOLOGY] 3 sources
ESET warns of rising ‘quishing’ attacks using malicious QR codes
Cybercriminals are using ‘quishing’—phishing via QR codes—to bypass corporate security filters and target employees' mobile devices, according to ESET.
2 months ago

[TECHNOLOGY] 3 sources
Cybersecurity researchers identify new macOS and Android malware threats
New malware threats have been identified targeting macOS via AmnesiaStealer and Android via a WindRelay and SpyNote combination used in NFC-based payment fraud.
2 months ago

[CRIME] 3 sources
Digital fraud waves target motorists and banking users in Denmark and Norway
New digital fraud waves are targeting motorists in Denmark with fake parking fines and Norwegian citizens through sophisticated screen-sharing scams designed to bypass traditional banking security.
2 months ago

[TECHNOLOGY] 6 sources
Cybercriminals target young adults through institutional impersonation
Cybercriminals are increasingly targeting young adults by impersonating public institutions via SMS and calls, often exploiting a false sense of digital confidence to steal data and funds.
2 months ago

[TECHNOLOGY] 5 sources
Digital payment fraud rises as debit cards face higher risks
Digital fraud is rising, with debit cards identified as high-risk due to direct fund access. Experts advise immediate card blocking and formal claims to mitigate losses from unauthorized transactions.
2 months ago

[TECHNOLOGY] 3 sources
Cybersecurity experts warn of new NFC-based banking fraud
Cybersecurity experts warn of a new NFC relay attack where scammers use social engineering and malicious apps to steal contactless bank card data in real time.
2 months ago

[TECHNOLOGY] 2 sources
Android malware uses SpyNote and WindRelay to steal credit card data
Group-IB researchers discovered a new Android malware attack using SpyNote and WindRelay to steal credit card data via NFC and remote access during fraudulent phone calls.
2 months ago

[TECHNOLOGY] 3 sources
Cybersecurity experts warn of rising phishing and NFC-based mobile payment fraud
Cybercriminals are deploying advanced phishing-as-a-service tools and specialized NFC relay malware to bypass authentication and steal payment card data, targeting both corporations and individuals.
2 months ago

[TECHNOLOGY] 12 sources
Cyber fraud tactics rise in Turkey targeting banking and government services
Cybercriminals are using sophisticated phishing, fake government websites, and banking 'payment request' features to defraud citizens in Turkey, particularly during real estate and vehicle transactions.
3 months ago

[TECHNOLOGY] 4 sources
Cybersecurity experts warn of evolving digital scams and payment risks
Cybersecurity experts warn that digital scams often target human trust rather than technical systems, noting that recovery of stolen funds depends heavily on whether credit cards or transfers were used.
3 months ago

[TECHNOLOGY] 5 sources
Cybercriminals deploy WhatsApp and parking fee phishing scams
Scammers are using fake WhatsApp notifications and fraudulent parking fee SMS messages to steal money and personal data through phishing links and urgent social engineering tactics.

Sources

20minutos.es · 5min.at · ad-hoc-news.de · afriquesports.net · akeza.net · aksam.com.tr · android-mt.ouest-france.fr · baargaal.net · bbv-net.de · beobachter.ch · bild.de · biz.cafef.vn · borncity.com · brasilemfolhas.com · cfoworld.cz · chip.de · clicnoticias.com.mx · clint.be · consumotic.mx · courage-online.de · ct24.cz · cybersecuritynews.es · cysnews.cz · dagens.no · diariodelcauca.com.co · diariodelsur.com.co · diebewertung.de · dinero.com.sv · dobreprogramy.pl · donostitik.com · dorstenerzeitung.de · ebizlatam.com · economedia.ro · elperiodicodeportivo.com.co · empresariodigitalnic.com · eurodressage.com · extra.com.co · fayerwayer.com · futurezone.de · gamepro.de · gazetedamga.com.tr · giga.de · haber1.com · halternerzeitung.de · hellwegeranzeiger.de · infoplatense.com.ar · informacija.rs · instalki.pl

This summary has been updated 30 times: see revision history