social engineering Archives

FBI Warns of Scattered Spider’s Expanding Attacks on Airlines Using Social Engineering

30Jun

By RBNo Comments

News

FBI Warns of Scattered Spider’s Expanding Attacks on Airlines Using Social Engineering

According to the U.S. Federal Bureau of Investigation (FBI), the infamous cybercrime organization Scattered Spider has expanded its target base to include the airline industry. The agency claimed that in order to combat the activity and assist victims, it is actively collaborating with aviation and industrial partners. The FBI stated in a post on X that these attackers use social engineering tactics, frequently posing as workers or contractors, to trick IT help desks into allowing access. Many times, these strategies entail ways to get around multi-factor authentication (MFA), like persuading support desk staff to add unapproved MFA devices to compromised accounts. Additionally, third-party IT providers are frequently the focus of scattered spider assaults, which expose reliable ...

Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering

Since early October 2024, the threat actors connected to the Black Basta ransomware have been seen altering their social engineering strategies and disseminating a new set of payloads, including Zbot and DarkGate. The threat actor will email bomb users in the target environment, which is typically accomplished by concurrently adding the user's email to multiple mailing lists, according to Rapid7. The threat actor will contact the affected users following the email bomb. As was noted back in August, the attackers initially communicate with potential targets on Microsoft Teams by posing as the company's IT or support staff. In several cases, they have also been seen posing as IT employees of the targeted company read more about Black Basta Ransomware Evolves with Email Bombing QR Code...

theHarvester – Email Harvesting & Social Engineering

Overview theHarvester is an OSINT gathering tool to help determine a domain's external threat landscape. It gathers names, emails, IPs, subdomains, and URLs by using multiple search engines. In this article, we will show you how to use theHarvester, mainly as an email harvesting tool. emails can be extracted based on a given domain by using different search engines such as Bing, Virustotal, Shodan and etc. These email addresses can be used for brute-forcing login accounts or social engineering. You can download theHarvester from here. How to use theHarvester The command format to use theHarvester is: theHarvester -d <domain> -b <search engine source> To elaborate: -d (is used to specify the target domain) -b (is used to specify the search engines...