Radar Truffe
I gruppi ransomware hanno aggiunto l'esfiltrazione dei dati al gioco di cifratura intorno al 2020. Tracciamo i leak site attivi, le famiglie che colpiscono PMI svizzere ed europee, e la checklist di incident response.
La Polizia Postale italiana ha lanciato un allarme contro una truffa online molto diffusa: email che si fingono comunicazioni ufficiali delle Forze di Polizia, con loghi, intestazioni e firme false...
Una nuova campagna malware combina le tecniche ClickFix e EtherHiding per colpire utenti aziendali e consumer. Dopo la compromissione di siti web legittimi, gli attaccanti iniettano script offuscati...
Il CSIRT Italia ha rilevato una campagna di phishing massiva veicolata tramite PEC (Posta Elettronica Certificata) con allegati ZIP contenenti una pagina HTML malevola a tema "Fattura Elettronica"....
Email simula notifica vocemail da PBX aziendale (Mitel/Cisco/RingCentral) con allegato 'voicemail.html' o 'voicemail.zip'. L'allegato è un downloader di malware (Emotet, Qakbot, IcedID). Indicatori:...
Data breach notifications are flooding inboxes and mailboxes, with over 471 million victim notices sent in the first half of 2026 alone, yet only 24% reveal the attack vector. Worse, scammers now...
A dark web marketplace called Nexus is selling digital scans of more than 153 million US and Canadian drivers licenses, reportedly siphoned from a major identity verification company used by Fortune...
A text that contains only your name and a question mark is a deliberate hook used by scammers who buy breached contact lists. The goal is to make you reply "Who is this?" or "Wrong number" so they...
A US CEO running a ransomware remediation firm has been criminally charged with allegedly defrauding victims: prosecutors say he secretly paid the attackers for decryption keys, then billed clients...
Scammers are sending iMessage texts that include a fake Facebook Marketplace listing showing the recipient's own name as the seller. The personalized screenshot acts as a 'conversation lure',...
Cybercriminals are targeting Free Mobile customers in France with sophisticated phishing emails sent after the operator's October 2024 data breach. Messages copy the official branding and demand a...
The domain third-party.com, long used as a placeholder in developer documentation, now hosts a ClickFix attack that impersonates a Cloudflare security check to trick Windows users into running...
The FBI is alerting the public to a surge in scams where criminals impersonate US or foreign law enforcement and government officials to extort money and steal personal information. Between January...
Scammers are exploiting Meta's automated copyright complaint system to suspend Instagram accounts at will and then extort victims for cryptocurrency ransoms to restore them. Repeated fraudulent...
Scammers are sending fake Revolut security texts that appear in the same SMS thread as legitimate bank messages, often just days after a data disclosure. Victims are directed to a phishing page that...
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social-engineering attacks. ClickFix lures victims into copying and pasting a command...
A new malware family called SynkLoader is being delivered through fraudulent Microsoft Teams messages. Attackers impersonate colleagues or IT staff and send chats that contain links or attachments...
A threat actor calling itself "Ransom Busters" is contacting ransomware victims before attacks become public, claiming it can decrypt files and delete stolen data for $20,000-$60,000. Researchers at...
Steam hardware buyers across Europe are being warned: a cyberattack on logistics provider CEVA Logistics exposed names, home addresses, phone numbers, and order details for anyone who received a...
Apri Mythos e incollalo. Triage gratuito in secondi. Dossier forense difendibile da CHF 29/mese quando serve una traccia.