Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In the early days of the Internet, a single IP address was a reliable indicator of a single user. However, today’s Internet is more complex. Shared IP addresses are now common, with users connecting via mobile IP address pools, VPNs, or behind CGNAT (Carrier Grade Network Address Translation). This makes relying on IP addresses alone a weak method to combat modern threats like automated attacks and fraudulent activity.

A wave of X account hacks has led to the rapid success of a pump-and-dump scheme for the $HACKED Solana token, with users rushing to buy in. High-profile accounts compromised in this attack include MoneyControl (1.4 million followers), People Magazine (7.8 million), and EUinmyRegion, run by the European Commission, with nearly 100,000 followers. Moreover, Computer brand Lenovo’s India division, film director Oliver Stone, Yahoo News UK, and Brazilian soccer player Neymar Jr.

Analysis of typosquatting and brand impersonation activity across 500 of the most visited domains provides insight in to how these techniques come together to effectively deceive. From February 2024 to July 2024, Zscaler’s ThreatLabz tracked more than 30,000 lookalike domains that impersonated some of the world’s most well-known brands.

Telegram is a messaging platform people use to communicate in large groups or broadcast messages in channels. Some common scams on Telegram include fake channels, tech support scams, phishing scams and cryptocurrency scams. The consequences of falling for these scams could include losing money, having your device infected with malware or even having your identity stolen. Continue reading to learn the seven most common types of scams on Telegram so you can avoid falling victim to these scams.

Like the speed of light, phishing remains a reliable constant in the cybercrime universe, never going out of fashion with fraudsters, always reinventing itself to stay relevant. As part of that reinvention, phishing-related scams increasingly use search engine optimization (SEO) to drive malicious websites higher in search results, outranking legitimate sites whose brands they often impersonate.

A reminder to read your emails with a critical eye.

A deepfake is a form of media, such as a photo or video, generated by Artificial Intelligence (AI) to depict real or non-existent people performing actions they never did. AI manipulates a picture, video or voice recording to analyze a person’s characteristics and then blends those characteristics with existing footage using unique algorithms.

The subscription model is a gift that keeps on giving. For customers, it offers convenience, flexibility, and continuous access to the services or products they love. For businesses, it creates a steady and predictable revenue stream, fosters long-term customer relationships, and provides valuable insights into user behavior. But here’s a third player in the game that loves subscriptions just as much: fraudsters.

Research from The Financial Ombudsman Service, a U.K. based organization dedicated to helping citizens with free financial advice, has found an increase in Authorized Pushed Payment (APP) scams. These attacks are rising both in number and sophistication. The Financial Ombudsman Service is a U.K. organization dedicated to helping residents with all things financial-as-a-free service. As part of this service, they take in a large number of complaints around financial fraud.

Business email compromise (BEC) attacks have caused more than $55 billion in losses between 2013 and 2023, according to an advisory from the U.S. Federal Bureau of Investigation (FBI). “The BEC scam continues to target small local businesses to larger corporations, and personal transactions while evolving in their techniques to access those business or personal accounts,” the FBI says.