Dismiss this notice
Avast Premium Security Christmas 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9410

Dismiss this notice
ExpressVPN Christmas 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9405

Dismiss this notice
Master PDF Editor Christmas 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9407

Dismiss this notice
O&O Software Christmas Blowout 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9409

Dismiss this notice
Bandicam Christmas 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9404

Dismiss this notice
HitmanPro.Alert Christmas 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9406

Dismiss this notice
GFYI [Official] Ashampoo® Christmas Blowout 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9408

Dismiss this notice
Emsisoft Anti-Malware Home Christmas 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9412

Dismiss this notice
Macrium Reflect Home Christmas 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=9415

Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
SECURITY ALERT: New Credential Stealing Campaign Hits Nordic Countries
#1
Heart 
Quote:
[Image: heimdal-logo.svg]

Users are lured with a fake document sent via email. How this new phishing campaign works and how to stay safe.

People in Nordic countries and beyond should beware: there’s a new credential stealing campaign up and running. For now, it seems to be hitting mostly these countries, but there’s no telling when it will extend to the rest of the world. Where there’s (illicit) money to be made, hackers are restless.

How the New Nordics Credential Stealing Campaign Works

As far as we’ve seen so far, the new Nordics credential-stealing campaign is targeting working emails. The malicious message pretends to be part of a previously agreed upon conversation, since the document is introduced as a link, without much explanation.

This is how a typical email looks like:

Quote:Fra: [sender email address] Sendt: 2. oktober 2019 09:56
Emne: Doc
Prioritet: Høj

Hei

Finn vedlagte dokument

Vis Dokument (https://amagauto-my.sharepoint.com/perso...cdca%2F%29)

Med vennlig hilsen

[Name

Phone, Email, Company name etc.]

Translated into English, this email would be this:

Quote:From: [sender email address]
Posted: October 2, 2019 9:56 AM
Subject: Doc
Priority: High

Hi

Find the attached document

View Document (https://amagauto-my.sharepoint.com/perso...iew&wd=tar 7C97f58f57-7285-4f70-8af0-fb5d7d3e3b82% 2FPDF% 20002% 7C4c8df191-241d-4d43-91b6-b3658f3bcdca% 2F% 29)

With best regards

[Name

Phone, Email, Company name etc.]

What happened next, if the user clicked that link?

They are redirected to a picture of a document (it’s not even a real document). The picture has a hyperlink inserted on it, which means that when a user clicks it, they will be redirected to a malicious page.

The fraudulent page then asked users to login with whatever account they had, either Yahoo, Office 365, Gmail, etc.
...
Continue Reading
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
Rogue Anti-Malware V14.1.0
V14.1.0 01/20/2020...harlan4096 — 11:30
Google Chrome 79 crashing on Linux with ...
Google Chrome and ...dhruv2193 — 11:25
KeePass 2.44
KeePass 2.44:   ...harlan4096 — 08:15
Mozilla Firefox Browser 72.0.2
Mozilla Firefox Br...harlan4096 — 08:12
Adobe Flash Player 32.0.0.321
Adobe Flash Player...harlan4096 — 08:11

[-]
Birthdays
Today's Birthdays
avatar (45)Josepharelf
avatar (34)kholukrefar
Upcoming Birthdays
avatar (44)theoldevext
avatar (39)algratCep
avatar (34)zetssToomy
avatar (41)GornOr
avatar (44)Jamesmog
avatar (32)opeqyrav
avatar (35)uxegihor

[-]
Online Staff
There are no staff members currently online.

>