Category Archives: fraud

Login-stealing phishing sites conceal their evil with lots of hyphens in URL

Researchers at PhishLabs recently spotted a trend emerging in malicious web sites presented to customers: mobile-focused phishing attacks that attempt to conceal the true domain they were served from, by padding the subdomain address with enough hyphens to push the actual source of the page outside the address box on mobile browsers.

"The tactic we're seeing is a tactic for phishing specifically mobile devices," said Crane Hassold,  a senior security threat researcher at PhishLabs’ Research, Analysis, and Intelligence Division (RAID).

Hassold called the tactic "URL padding," the front-loading of the web address of a malicious web page with the address of a legitimate website. The tactic, he said, is part of a broad credential-stealing campaign that targets sites that use an e-mail address and password for authentication; PhishingLabs reports that there has been a 20 percent increase overall in phishing attacks during the first quarter of 2017 over the last three months of 2016. The credentials are likely being used in other attacks based on password reuse.

Read 6 remaining paragraphs | Comments

Former startup CEO indicted for allegedly defrauding employees

 Following allegations of the now-defunct job search startupWrkRiot scamming employees out of wages and its CEO Isaac Choi of misleading former employees about his credentials, the U.S. Department of Justice has announced that Choi has been indicted on charges of five counts of wire fraud. Choi allegedly lured several of WrkRiot’s former employees to work for him based on “false… Read More

Signifyd raises $56 million for e-commerce fraud protection

 E-commerce fraud is a growing problem, but Signifyd thinks it has a solution to save businesses money. Their company is growing fast and has closed a $56 million Series C investment led by Bain Capital Ventures. Menlo Ventures also participated in the round. Signifyd counts big clients like Jet.com, Peet’s Coffee and Lacoste, where it uses its pattern recognition technology to warn… Read More