Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse basic security controls. Here is the defanged link: hxxps://YKZjqa7A@gynd--[.]koncar-hr[.]com/handlers@isc.sans.edu Let's break it down...
One URL, Three Different Tricks, (Thu, Sep 24th)
About this summary. This is a short, independently written summary of an article first published by SANS Internet Storm Center. Cyber Security News did not report or verify the underlying story. Read the original: https://isc.sans.edu/diary/rss/33366
Source attribution: headline and facts are from SANS Internet Storm Center (isc.sans.edu). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
77% of Ransomware Groups Are Targeting the Healthcare Sector
A new analysis of ransomware activity reveals broad, consistent targeting pressure across the United States. Ransomware activity is not limited to any specific industry…
Unmasking EvilTokens: Getting to the root of device code phishing
What is device code phishing? EvilTokens platform and operations EvilTokens phishing emails Mitigation and protection guidance Microsoft Defender XDR detections Hunting…
Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud
Microsoft, along with a group of industry partners, disrupted EvilTokens, a short-lived but highly consequential cybercrime platform that investigators linked to more…
Cybersecurity Awareness Month 2026: Critical Infrastructure Urged to Adopt Cybersecurity 3Rs
October is Cybersecurity Awareness Month, a global effort to promote online safety and digital security. Launched in 2024 by the National Cybersecurity Alliance and the…
Fake parcel delivery messages steal your card and bank details
Parcel delivery phishing campaigns appear around the world under different courier names. In the United States, the messages commonly impersonate USPS and claim that a…
CLOSEDQUORUM, the malware that asks four AI models what to do next
Cisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator required. Cisco Talos found malware, dubbed…