Threat Category: Spam and Phishing | Page 2

Kaspersky experts look back on their expectations about the 2024 privacy and consumer cyberthreats trends and try to predict what to expect in 2025.

Kaspersky experts share their insights into cyberthreats that face online shoppers in 2024: phishing, banking trojans, fake shopping apps and Black Friday sales on the dark web data market.

Scammers use large language models (LLMs) to create phishing pages and leave artifacts in texts and tags, like the phrase “As an AI language model…”.

Kaspersky experts have discovered a new scheme that combines elements of spear and mass phishing

Kaspersky analysts explain which applications are targeted the most, and how enterprises can protect themselves from phishing and spam.

Explaining how scammers use phishing and OTP bots to gain access to accounts protected with 2FA.

Here’s how scams target buyers and sellers on online message boards, and how the gangs behind them operate.

In this report, we share our insights into the 2023 trends and statistics on financial threats, such as phishing, PC and mobile banking malware.

This report contains spam and phishing statistics for 2023, along with descriptions of the main trends, among these artificial intelligence, instant messaging phishing, and multilingual BEC attacks.

Kaspersky experts review last year’s predictions on consumer cyberthreats and try to anticipate the trends for 2024.

As Black Friday approaches, Kaspersky analyzes phishing and spam activity around major sales events, and reviews statistics on online shopping threats in 2023.

Gaming-related threat landscape in 2023: desktop and mobile malware disguised as Minecraft, Roblox and other popular games, and the most widespread phishing schemes.

Scammers are camouflaging phishing links with QR codes and distributing them through email.

Scammers are hacking websites powered by WordPress and placing phishing pages inside hidden directories. We share some statistics and tips on recognizing a hacked site.

Here is how email phishing scams targeting hot and cold crypto wallets, such as Trezor and Ledger, work.

Reports

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.

Spam and Phishing

Consumer and privacy predictions for 2025

Scammer Black Friday offers: Online shopping threats and dark web sales

Loose-lipped neural networks and lazy scammers

When spear phishing met mass phishing

Cybersecurity in the SMB space — a growing threat

Bypassing 2FA with phishing and OTP bots

Message board scams

Financial cyberthreats in 2023

Spam and phishing in 2023

Consumer cyberthreats: predictions for 2024

The dark side of Black Friday: decoding cyberthreats around the year’s biggest shopping season

Gaming-related cyberthreats in 2023: Minecrafters targeted the most

QR codes in email phishing

Phishing with hacked sites

Email crypto phishing scams: stealing from hot and cold crypto wallets

Reports

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Armored Likho expands its cyber-espionage toolkit

Mirage Kitten targets Middle East and Africa region with new malware