Fraud & Scams

Invoice Phishing Attacks Are Abusing the Shop App

Threat actors are abusing Shop, a legitimate app developed by Shopify, to launch phishing attacks, according to researchers at Gen…

Phishing Campaign Impersonates Interpol to Deliver Ransomware

A phishing campaign is targeting small businesses across Europe, Asia, the Middle East, and the United States with emails that imp…

How World Cup crypto prediction sites take your money

Crypto prediction games promise easy wins, but some are little more than token sales or outright scams. Here's what to look for.

6.9 million driver’s license numbers stolen from AssuranceAmerica

Millions of AssuranceAmerica customers are being notified after attackers accessed driver's license numbers and other personal inf…

Prompt Injection and the Rise of Agentic Risk

Boxers will often say, the punches that hurt the most aren’t the ones which are thrown with the most force, but the ones they didn…

RentGrow to Pay $2.25 Million to Settle FTC Allegations the Company Violated the Fair Credit Reporting Act and FTC Act

RentGrow, a provider of consumer reports for tenant screening, will be required to pay $2.25 million to settle Federal Trade Commi…

Microsoft fixes RoguePlanet zero-day in Defender

The RoguePlanet zero-day is now fixed in Microsoft Defender. Here's how to make sure your system is protected.

Turn off this Meta setting before someone generates AI images of you

Meta's new Muse Image tool lets anyone generate AI images of you from your public Insta profile. You won't be notified, and it's o…

Hyper-Targeted Social Engineering Needs Real-Time Video Response

There’s an important metric that can tell you exactly how vulnerable your high-risk employees and departments are to the next gene…

Your next car could be watching your face

Driver-monitoring technology is becoming mandatory in new cars, but privacy experts warn it could create new risks alongside the s…

Your Email is Protected. Is Your Teams Chat?

For years, security teams have poured resources into locking down the inbox, and for good reason. Email has always been the front…

How the Reddit and Discord false report scam steals accounts

Scammers are tricking Reddit and Discord users into handing over login codes by claiming they were involved in a false report.

Fake Netflix, Coca-Cola, and FIFA job scams target marketers

A fake recruiter phishing campaign uses trusted brands, nested redirects, and fake Google prompts to steal accounts.

CyberheistNews Vol 16 #27 [HOW TO] Your Cybersecurity Starts at Home on World Social Media Day

2026 Phishing by Industry Benchmarking Report: Findings on Human Risk

Every year, KnowBe4 analyzes millions of simulated phishing tests to measure one thing: how likely is your workforce to fall for a…

FTC Sends More Than $2.7 Million to Consumers Harmed by Handy Technologies

Image The Federal Trade Commission is sending checks totaling more than $2.7 million to eligible consumer…

Claude Code’s hidden tracker was an “experiment,” says Anthropic

Anthropic's hidden Claude Code tracker has raised new questions about prompt steganography and developer trust.

Static DLP Is Leaving You in the Dark: Why It’s Time for Intelligent, Self-Serve Outbound DLP and Misdirected Content Analysis

When we think about email security, our minds almost always jump to the inbound threats: the sophisticated phishing lures, the AI-…

Scammers are using AI to sell impossible flowers

AI-generated flower scams are blooming online, with scammers using fake images to sell seeds for plants that don't exist, like the…

How to tell if an image is AI-generated

Scammers are using AI-generated images to make fake stories more convincing. Here's how to separate real from fake.

Choose your WhatsApp username carefully

WhatsApp is introducing usernames to help protect your phone number. Just make sure you don't undermine that privacy by choosing t…

FTC Warns Companies Making Questionable ‘Made in the USA’ Claims

The Federal Trade Commission today issued warning letters to seven companies that appear to have misrepresented certain products a…

NetNut botnet takes a hit. Don’t be part of the next one.

Google, the FBI, and other partners have disrupted a residential proxy network built on millions of hijacked devices and used by c…

A week in security (June 29 – July 5)

A list of topics we covered in the week of June 29 to July 5 of 2026

Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts

Two new campaigns show how cybercriminals are increasingly relying on social engineering instead of software exploits to compromis…

INC Ransomware Gang Targets the Legal Sector

The INC ransomware-as-a-service (RaaS) operation has grown into one of the premier ransomware offerings, claiming hundreds of vict…

Apple’s Hide My Email doesn’t hide it very well

A year ago a researcher found a vulnerability in Apple's Hide My Email feature and now he's tired of waiting for a fix.

Fake Google and Cloudflare verification pages spread multiple malware families

We uncovered ClickFix attacks using fake Google and Cloudflare pages to deliver everything from infostealers to a newly discovered…

5 Essential Cybersecurity Defenses for Cloud Email Security

Cloud email has become the center of modern business. Regardless of your organization's industry or size, email connects employees…

Cybercriminals Are Targeting the FIFA World Cup 2026

KnowBe4 ThreatLabs tracked phishing campaign activity from the first week of April through June 22, 2026 — covering the pre-tourna…