--- title: "#social-engineering articles | Hashnode" description: "Explore 96 articles tagged #social-engineering on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/social-engineering" --- Tag # #social-engineering 96 posts · 20 followers [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Oct 27](https://hashnode.com/posts/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours/6ae0958b2ec3c926a0bcb543) ### [The Help Desk That Wasn't There: How a Teams Message Became Ransomware in Under 17 Hours](https://nulltrace.hashnode.dev/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours?utm_source=hashnode&utm_medium=feed) No vulnerability. No malicious link. Just a chat window, a friendly name, and a six-digit code — and Arctic Wolf counted more than 400 cases. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours/6ae0958b2ec3c926a0bcb543) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Sep 16](https://hashnode.com/posts/phantom-deal-fake-ma-fraud-en/6aaa0cfba23c4f4b54c4b554) ### [Phantom Deal: When the NDA Is the Payload](https://blog.fiscybersec.com/phantom-deal-fake-ma-fraud-en?utm_source=hashnode&utm_medium=feed) Summary It started with an innocuous WhatsApp message: "Hi David, I hope you are well. Are you at the office?" The sender claimed to be a real Gen executive based in Dublin. The profile used his nam 17 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/phantom-deal-fake-ma-fraud-en?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Sep 16](https://hashnode.com/posts/terminalfix-campaign-analysis-risk-of-active-directory-hijacking-from-risky-terminal-operations/6aaa0c24000fb2541de30c13) ### [TerminalFix Campaign Analysis: Risk of Active Directory Hijacking from Risky Terminal Operations](https://blog.fiscybersec.com/terminalfix-campaign-analysis-risk-of-active-directory-hijacking-from-risky-terminal-operations?utm_source=hashnode&utm_medium=feed) Executive Summary Recently, Microsoft Threat Intelligence published analysis of a wide-area attack campaign called TerminalFix — a dangerous evolution from the social engineering technique ClickFix. I 13 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/terminalfix-campaign-analysis-risk-of-active-directory-hijacking-from-risky-terminal-operations?utm_source=hashnode&utm_medium=feed) [Lakshay Dhoundiyal](https://hashnode.com/@LakshayDhoundiyal) · [Aug 26](https://hashnode.com/posts/browser-in-the-browser-attack/6a8ec4ac22aa1bb0f5112416) ### [Browser-in-the-Browser Attack: How Fake Login Windows Steal Real Passwords](https://lakshaydhoundiyal.hashnode.dev/browser-in-the-browser-attack?utm_source=hashnode&utm_medium=feed) A login popup can look exactly like the real thing. The problem is, your eyes may not be able to tell the difference. 10 min read · [lakshaydhoundiyal.hashnode.dev](https://lakshaydhoundiyal.hashnode.dev/browser-in-the-browser-attack?utm_source=hashnode&utm_medium=feed) [Đinh Văn Mạnh](https://hashnode.com/@PrismWalker) · [Aug 25](https://hashnode.com/posts/fake-microsoft-sysscan-bogus-security-scanner-invents-problems-tricks-victims-into-uninstalling-their-antivirus-then-funnels-them-into-a-refund-scam/6a8d4e452b34a83d75067646) ### [Fake Microsoft "SysScan": Bogus Security Scanner Invents Problems, Tricks Victims Into Uninstalling Their Antivirus, Then Funnels Them Into a Refund Scam](https://blog.fiscybersec.com/fake-microsoft-sysscan-bogus-security-scanner-invents-problems-tricks-victims-into-uninstalling-their-antivirus-then-funnels-them-into-a-refund-scam?utm_source=hashnode&utm_medium=feed) Overview On August 24, 2026, Malwarebytes disclosed a wave of websites calling themselves "SysScan," carrying Microsoft branding, claiming to check whether your antivirus (AV) software is working. Eve 17 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/fake-microsoft-sysscan-bogus-security-scanner-invents-problems-tricks-victims-into-uninstalling-their-antivirus-then-funnels-them-into-a-refund-scam?utm_source=hashnode&utm_medium=feed) [Joyce Abija](https://hashnode.com/@abijaj) · [Aug 20](https://hashnode.com/posts/you-don-t-have-to-be-important-to-be-hacked/6a86d07bb04e700cd8fe3353) ### [You don't have to be important to be Hacked](https://cybersage.hashnode.dev/you-don-t-have-to-be-important-to-be-hacked?utm_source=hashnode&utm_medium=feed) Think you're too ordinary to be hacked? Attackers don't need you to be important — just an easy way in. Learn the basics to protect yourself. 6 min read · [cybersage.hashnode.dev](https://cybersage.hashnode.dev/you-don-t-have-to-be-important-to-be-hacked?utm_source=hashnode&utm_medium=feed) [Scott McMahan](https://hashnode.com/@scottdudeman69) · [Aug 13](https://hashnode.com/posts/ai-powered-phishing-in-2026/6a7dd33908eb523c882c74e9) ### [AI-Powered Phishing in 2026](https://aitransformeronline.hashnode.dev/ai-powered-phishing-in-2026?utm_source=hashnode&utm_medium=feed) Explore how AI is transforming phishing attacks in 2026 and how businesses can strengthen email security, verification, and employee awareness. 1 min read · [aitransformeronline.hashnode.dev](https://aitransformeronline.hashnode.dev/ai-powered-phishing-in-2026?utm_source=hashnode&utm_medium=feed) [Sagun](https://hashnode.com/@sagun-labs) · [Aug 5](https://hashnode.com/posts/iloveyou/6a73214e354c83609c6ab0a4) ### [ILOVEYOU](https://sagunwrites.hashnode.dev/iloveyou?utm_source=hashnode&utm_medium=feed) The Email Worm That Fooled the World 7 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/iloveyou?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Jul 28](https://hashnode.com/posts/redhook-android-rat-a-new-step-in-android-device-hijacking-techniques/6a68711c0b2f7938f970b36f) ### [RedHook Android RAT: A new step in Android device hijacking techniques](https://blog.fiscybersec.com/redhook-android-rat-a-new-step-in-android-device-hijacking-techniques?utm_source=hashnode&utm_medium=feed) Campaign Summary A report from Group-IB Threat Intelligence published on July 9, 2026 confirms the re-emergence of RedHook malware — a remote access Trojan (RAT) on Android with breakthrough improveme 11 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/redhook-android-rat-a-new-step-in-android-device-hijacking-techniques?utm_source=hashnode&utm_medium=feed) [Justine Devs (Official)](https://hashnode.com/@justinedevs) · [Jul 1](https://hashnode.com/posts/the-malware-was-not-in-the-app-it-was-in-git-hooks/6a451766feaf2ba9874321ba) ### [The malware was not in the app. It was in .git/hooks.](https://jstn.hashnode.dev/the-malware-was-not-in-the-app-it-was-in-git-hooks?utm_source=hashnode&utm_medium=feed) This incident reinforced one rule for me: never trust a hiring repo just because the frontend looks polished. Verify the hooks, the config, and the delivery path first. 8 min read · [jstn.hashnode.dev](https://jstn.hashnode.dev/the-malware-was-not-in-the-app-it-was-in-git-hooks?utm_source=hashnode&utm_medium=feed)