The hottest Phishing Substack posts right now

And their main takeaways
Category
Top Technology Topics

How to not click on dodgy links

How to Survive the Internet • 159 implied HN points • 04 Oct 24
🕹 Technology Cybersecurity Phishing Online safety Digital Literacy Internet culture
  1. Be careful with emails from authority figures; they're likely to be phishing scams aimed at tricking you into sharing personal info.
  2. Phishing is a growing problem, with billions of spam emails sent daily, yet many still get through and lead to cyber attacks.
  3. Studies show that humans are often the weak link in cybersecurity, continually clicking on harmful links despite warnings and training.

Level Up Your Transaction Security

DeFi Education • 699 implied HN points • 25 Apr 23
🔮 Crypto Security Phishing Best Practices
  1. To keep your crypto safe, create a cold wallet for most of your assets and an 'ape wallet' for riskier activities. This way, you limit exposure to potential threats.
  2. Minimize the transactions you make with your main wallet to reduce risk. Only use it for important tasks to stay secure.
  3. Be aware of phishing scams and how they work. Educate yourself so you can recognize and avoid falling for them.

Making Sense of the Verizon Data Breach Investigation Report

Security Is • 39 implied HN points • 19 Jun 24
🕹 Technology Cybersecurity Data Breaches AI Phishing Information Security
  1. Most breaches are due to simple mistakes, like employees accidentally sending confidential info to the wrong place. Security teams need to focus on basic issues before tackling more complex problems.
  2. A large portion of breaches starts with phishing or stolen credentials. Companies should invest more in security measures like multi-factor authentication and employee training to lessen these risks.
  3. Generative AI hasn't impacted security breaches significantly yet. Most attackers are still using traditional methods, and no one seems to be targeting AI systems directly.

The Psychology of Phishing

Rod’s Blog • 79 implied HN points • 12 Feb 24
🕹 Technology Cybersecurity Social Engineering Phishing
  1. Phishing attacks work by exploiting human psychology, using tactics like fear, urgency, and authority to manipulate targets into taking actions that compromise their security.
  2. Attackers make phishing emails appear legitimate by mimicking trusted brands and official language, leveraging social cues to deceive individuals into trusting them.
  3. To protect against phishing, individuals should cultivate skepticism, verify requests for sensitive information, and educate themselves and others about recognizing phishing attempts.

Fake LastPass App Made Its Way Onto Apple's App Store, Likely Used to Steal Credentials

Metacurity • 39 implied HN points • 09 Feb 24
🕹 Technology Security App Store Phishing Cyber Operations Vulnerabilities
  1. A fake LastPass app managed to get onto Apple's App Store and was likely designed to steal user credentials.
  2. Iranian cyber operations against Israel are becoming bolder and more sophisticated, posing risks to American critical infrastructure and the 2024 elections.
  3. The FCC has cracked down on AI-generated voice calls, recognizing them as 'artificial' and restricting their use for non-emergency purposes without consent.
Get a weekly roundup of the best Substack posts, by hacker news affinity:

Microsoft Sentinel SOC 101: How to Detect and Mitigate Quishing Attacks with Microsoft Sentinel

Rod’s Blog • 79 implied HN points • 05 Oct 23
🕹 Technology Cybersecurity Software Email Phishing
  1. QR codes can be used maliciously, so it's important to generate them safely using reputable, secure QR code generators and consider adding password protection for private information.
  2. A quishing attack combines QR codes and phishing to trick victims into sharing sensitive data on fraudulent websites, often bypassing traditional security measures.
  3. Using Microsoft Defender for Office 365 along with Microsoft Sentinel can help detect and mitigate quishing attacks by configuring anti-phishing policies and connecting data for a comprehensive view of potential threats.

Sự cố Vietcombank, một góc nhìn kỹ thuật

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 16 Aug 16
🕹 Technology Security Banking Phishing Encryption Communication
  1. Vietcombank encountered a security incident involving a customer's stolen funds, prompting technical analysis and identification of potential attack methods like phishing and exploiting vulnerabilities in the Smart OTP system.
  2. Smart OTP, a feature of Vietcombank, was found to have vulnerabilities that could be exploited by attackers to gain control over customer accounts, highlighting the importance of robust security protocols in online banking systems.
  3. The importance of independent security audits, continuous monitoring, and prompt responsiveness to security reports is crucial for financial institutions like Vietcombank to safeguard customer data and prevent unauthorized access.

Weekly update: Data breach, Incognito, Linux malware, new course about Red Team for LLMs, phishing without login page.

Secure GenAI • 0 implied HN points • 07 Apr 24
🕹 Technology Cybersecurity Malware Data Privacy Learning Resources Phishing
  1. AT&T experienced a massive data breach affecting 73 million customers' personal information, prompting concerns about data security measures in place.
  2. Google is implementing new security measures in Incognito mode to prevent unauthorized access using stolen session cookies, emphasizing the importance of safeguarding user data.
  3. The discovery of the first Linux malware injected by an open-source maintainer highlights the vulnerability of systems worldwide, underscoring the critical need for enhanced cybersecurity measures.

matrix card - super cheap yet secure T-FA solution

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 01 Apr 08
🕹 Technology Security Authentication Development Phishing
  1. Two-factor authentication (T-FA) utilizes two different methods for higher security. Commonly, it involves something a person knows and something they have or are.
  2. Using a matrix card as the second authentication factor is a cost-effective solution compared to other options like RSA SecurID, making it easy to implement and inexpensive for service providers and customers.
  3. While T-FA with a matrix card is helpful, it does not fully protect against certain attacks like man-in-the-middle phishing. Authentication of transactions and vigilance for abnormal behavior are crucial for enhanced security.

Scary attacks

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 26 Mar 08
🕹 Technology Cybersecurity Data Breaches Malware Vulnerabilities Phishing
  1. Highly targeted and technically advanced attacks can be carried out by well-funded and motivated individuals or groups.
  2. In practice, these attacks may involve the use of forged email headers, exploits within documents, keyloggers, and DNS-bouncer systems.
  3. The attackers may craft their exploits to evade detection by antivirus products, making the attacks harder to detect and defend against.