Tag

#social-engineering

95 posts20 followers

Explore Hashnode

Alternatives

Phantom Deal: When the NDA Is the Payload

Summary It started with an innocuous WhatsApp message: "Hi David, I hope you are well. Are you at the office?" The sender claimed to be a real Gen executive based in Dublin. The profile used his nam

blog.fiscybersec.com

Lưu Tuấn AnhSep 16 · 13 min read

TerminalFix Campaign Analysis: Risk of Active Directory Hijacking from Risky Terminal Operations

Executive Summary Recently, Microsoft Threat Intelligence published analysis of a wide-area attack campaign called TerminalFix — a dangerous evolution from the social engineering technique ClickFix. I

blog.fiscybersec.com

Lakshay DhoundiyalAug 26 · 10 min read

Browser-in-the-Browser Attack: How Fake Login Windows Steal Real Passwords

Imagine you're browsing a website. You click “Sign in with Google.” A familiar login window appears. The logo looks right. The colors look right. The layout looks right. Even the little browser frame

lakshaydhoundiyal.hashnode.dev

Đinh Văn MạnhAug 25 · 17 min read

Fake Microsoft "SysScan": Bogus Security Scanner Invents Problems, Tricks Victims Into Uninstalling Their Antivirus, Then Funnels Them Into a Refund Scam

Overview On August 24, 2026, Malwarebytes disclosed a wave of websites calling themselves "SysScan," carrying Microsoft branding, claiming to check whether your antivirus (AV) software is working. Eve

blog.fiscybersec.com

Joyce AbijaAug 20 · 6 min read

You don't have to be important to be Hacked

"I’m just an ordinary person, I don't work for the government or FBI. Why would anyone want to hack me?” This question reflects one of the biggest misconceptions people have about cybersecurity: the b

cybersage.hashnode.dev

Scott McMahanAug 13 · 1 min read

AI-Powered Phishing in 2026

Phishing attacks are becoming more difficult to detect as cybercriminals use AI to create polished messages, personalize fraudulent requests, and automate campaigns at scale. Traditional Warning Signs

aitransformeronline.hashnode.dev

SagunAug 5 · 7 min read

ILOVEYOU

On May 4, 2000, millions of people around the world opened their email and saw a message with an unusually personal subject: ILOVEYOU For many recipients, it looked like a message from someone they kn

sagunwrites.hashnode.dev

Lưu Tuấn AnhJul 28 · 11 min read

RedHook Android RAT: A new step in Android device hijacking techniques

Campaign Summary A report from Group-IB Threat Intelligence published on July 9, 2026 confirms the re-emergence of RedHook malware — a remote access Trojan (RAT) on Android with breakthrough improveme

blog.fiscybersec.com

Justine Devs (Official)Jul 1 · 8 min read

The malware was not in the app. It was in .git/hooks.

My first job hunt taught me to inspect the repo before trusting the task I am currently looking for my first job So when a recruiter messaged me on LinkedIn and sent over a take-home repository, I tre

jstn.hashnode.dev

Aeon Flex / Splicer ScornJun 17 · 8 min read

Deepfakes Are Free Now. Your Company’s Phone System Is Not.

And that’s the whole problem. Let me set the scene for you. It’s 2:47 PM on a Tuesday. Your CFO gets a call. It’s the CEO’s voice. Same cadence. Same little pause before numbers. Same “hey, can you ru

chaincoder.hashnode.dev

Search Hashnode

Explore Hashnode

Trending tags this week

Phantom Deal: When the NDA Is the Payload

TerminalFix Campaign Analysis: Risk of Active Directory Hijacking from Risky Terminal Operations

Browser-in-the-Browser Attack: How Fake Login Windows Steal Real Passwords

Fake Microsoft "SysScan": Bogus Security Scanner Invents Problems, Tricks Victims Into Uninstalling Their Antivirus, Then Funnels Them Into a Refund Scam

You don't have to be important to be Hacked

AI-Powered Phishing in 2026

ILOVEYOU

RedHook Android RAT: A new step in Android device hijacking techniques

The malware was not in the app. It was in .git/hooks.

Deepfakes Are Free Now. Your Company’s Phone System Is Not.