Kaspersky official blog

Scammers are exploiting GetShared to bypass email security.

Phishers have adopted another trick: they send emails pretending to be from Docusign with a fake link to a document that the recipient must sign.

An Office 365 security alert as bait in a phishing email.

Telegram bot sells subscriptions to phishing tools to hack Microsoft 365 accounts, including 2FA bypass.

Cybercriminals are using AitM techniques to compromise accounts of company executives. How do they do this, and how to protect against it?

Independent cybersecurity lab AV-Comparatives put 15 anti-phishing solutions to the test — with only eight making the grade. We took home the gold, adding to our already extensive collection of accolades.

A turnkey home? A turnkey website? How about turnkey phishing? Scammers now sell turnkey phishing services to other scammers. Read on to find out how it works.

Developers’ accounts are being hijacked using fake job offers sent from a legitimate GitHub address.

A new phishing technique uses progressive web apps (PWAs) to mimic browser windows with convincing web addresses to steal passwords.

Cybercriminals are using genuine Facebook infrastructure to send phishing emails threatening to block accounts.

Cybercriminals prey on corporate credentials by sending phishing links through Dropbox after priming the victim.

Cybercriminals prey on access to mailing tools by sending phishing emails through these same tools.

Attackers invite employees to complete fake self-evaluations to steal corporate credentials.

Cybercriminals are using hijacked SharePoint servers to send dangerous notifications.

Why might a business email contain a link to Google Translate?

How scammers hijacked QQ accounts in a phishing QR-code attack.

Here’s how phishers extract phone numbers and credentials from users of Wise.

We explain how phishers are swindling Wells Fargo customers out of personal credentials, passwords, card details, and selfies with an ID card.

We explain a new sneaky technique for stealing passwords, and how to avoid being tricked by a phishing site.

Kaspersky have a new service that allows our threat intelligence customers to take down malicious and phishing sites.

To be ready for attacks targeting your company, information security officers need to know about received spear-phishing e-mails.