On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to read “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered that

Continue ReadingTwitter’s Clumsy Pivot to X.com Is a Gift to Phishers

If only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although

Continue ReadingApril’s Patch Tuesday Brings Record Number of Fixes

A cybercrook who has been setting up websites that mimic the self-destructing message service privnote.com accidentally exposed the breadth of their operations recently when they threatened to sue a software

Continue ReadingFake Lawsuit Threat Exposes Privnote Phishing Sites

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “The Manipulaters,” a sprawling web hosting network of phishing and spam delivery platforms. In January 2024, The Manipulaters pleaded

Continue Reading‘The Manipulaters’ Improve Phishing, Still Fail at Opsec