Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Oliver Devane
Risk Actors Taking Benefit of FTX Chapter - Techin World Live
Authored by Oliver Devane It hasn’t taken malicious actors lengthy to reap the benefits of the latest chapter submitting of FTX, McAfee has found a number of phishing websites focusing on FTX customers. One of many websites found was registered on the 15th of November and asks customers to submit their crypto pockets phrase to obtain a refund.
FIFA World Cup: Be wary of these tech scams
Home > Smart Living> Innovation > FIFA World Cup: Be wary of these tech scams A primer on spotting scams and staying penalty-free during this year’s Fifa World Cup football tournament /smart-living/innovation/fifa-world-cup-be-wary-of-these-tech-scams-111668497020845.html 111668497020845 story On 20 November, the men’s football World Cup kicks off in Qatar and will be one of the most-watched sporting events of at least the last four years.
Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users
Aug 29, 2022 8 MIN READ Authored by Oliver Devane and Vallabh Chole September 9, 2022 Update: Since the original publication of this blog on August 29, 2022, the Flipshope browser extension was updated in the Chrome Store on September 6, 2022 with a version that no longer contains the potentially harmful features originally discussed in this blog.
Office 365 Users Targeted by Voicemail Scam Pages
Over the past few weeks McAfee Labs has been observing a new phishing campaign using a fake voicemail message to lure victims into entering their Office 365 email credentials. At first, we believed that only one phishing kit was being used to harvest the user’s credentials. However, during our investigation, we found three different malicious kits and evidence of several high-profile companies being targeted.
16Shop Now Targets Amazon
Since early November 2018 McAfee Labs have observed a phishing kit, dubbed 16Shop, being used by malicious actors to target Apple account holders in the United States and Japan. Typically, the victims receive an email with a pdf file attached.
Attention Red Dead Redemption 2 Players: Dodge This New Download Scam
Rockstar Games’ Red Dead Redemption 2 has struck a popular chord with many online gamers. Unfortunately, the Western-themed action-adventure game has also become a popular vessel for malicious activity among cybercriminals as well. Scammers are tricking gamers into giving up their personal information with phony “free” downloads of the online game, while simultaneously making a profit on these downloads. You’re probably wondering how exactly this scam works.
Phishing Attacks Employ Old but Effective Password Stealer
A few months ago we received a sample from a customer that turned out to be a password stealer (PWS). One thing about this malware stood out: the subdirectory used in the access panel URL. It contained the string “***=**U=TEAM” (which we have obfuscated). Our investigations lead us to believe this may be a case of industrial espionage. The actors use compromised websites to host their access panels. Luckily for us they made a mistake and left the ZIP file they dropped on the compromised site.
Trillium Exploit Kit Update Offers 'Security Tips'
McAfee Labs has previously blogged about the Trillium Exploit Kit Version 3.0, which is commonly used to create and distribute malware. Last week, Version 4.0 appeared on several underground forums. We have analyzed the new version of the tool and it contains new functionality. These include: The user has several options when creating a PDF downloader, though all of these options create very similar PDF files.
ASCII.jp：アマチュアハッカーを犯罪者に変える、悪意あるフォーラム
McAfee Blog アマチュアハッカーを犯罪者に変える、悪意あるフォーラム 2016年04月11日 15時19分更新 文● McAfee セキュリティの研究者たちは、キーロガーやリモートアクセスツールなど悪意のあるソフトウェアをダウンロードすることができるフォーラムの存在に気付いています。経験の浅い一部のハッカーはこれらのフォーラムを訪れ、お金欲しさに悪意のあるスレッドを作ろうと決意するかもしれません。 以下は有名なハッキングフォーラムが出自のコードスニペット（プログラムの断片）についてです。 最近、私たちは「17_02_16~_HKL_Purchase_Order.ace」というファイル名の投稿を受け取りました。このファイルには.scrという拡張子（スクリーンセーバー）の別ファイルが埋め込まれていました。抜き出したファイルの中身はKeyBaseという名前で知られているキーロガー/パスワードスティーラーでした。 KeyBaseはキットとして提供されます。...
Hacktivists Turn to Phishing to Fund Their Causes
At Intel Security we recently observed a phishing campaign targeting Apple account holders. The link directed the user to a compromised WordPress site used to serve the fake Apple ID login page. Users are asked to log in with their Apple IDs, and then are requested to update billing information and credit card details. In the following images we have highlighted some indicators that the site is not legitimate. Users are then redirected to the official Apple page.
Malicious Forums Turn Amateur Hackers Into Cybercriminals
This blog was written by Oliver Devane and Mohinder Gill. Security researchers are aware of forums that offer downloads of malicious software such as keyloggers and remote access tools. Some inexperienced hackers may visit these forums and decide to chase the money and create a malicious agenda. The following is a snippet from a popular hacking forum. We recently received a submission with the filename 17_02_16~_HKL_Purchase_Order.ace.
File-Hosting Site Turns Your File Into Adware
This post was written by Oliver Devane and Mohinder Gill of Intel Security. We recently received a sample from a customer and upon initial analysis it looked like a bundled software installer. Upon execution, the installer launches a website and then attempts to download an executable—an installer for FLV Player. Nothing out of the ordinary, but what grabbed our attention was the website that had loaded after execution. It appeared to be a “Thanks for installing” page but the domain name looked odd.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Oliver
Contact Oliver, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack