#Phishers abuse #Google #OAuth to spoof Google in #DKIM replay attack

https://www.bleepingcomputer.com/news/security/phishers-abuse-google-oauth-to-spoof-google-in-dkim-replay-attack/

I was momentarily worried that my family had uploaded too many Easter videos. Then I remembered two things:
- I already pay for more storage than we can ever use
- This email didn't come to my Gmail account

Tricky #phishers, you almost got me this time

Booking.com #Phishers May Leave You With Reservations - https://krebsonsecurity.com/2024/11/booking-com-phishers-may-leave-you-with-reservations/ "there is a great demand for compromised booking.com accounts belonging to hotels and other partners."

Via #LLRX Pete Recommends Weekly highlights on cyber security issues, October 14, 2023. 4 highlights - #Phishers #Spoof #USPS, 12 Other Natl’ Postal Services; #Privacy professionals need to be aware of tech abuse; Is That #ATM Safe? 8 Tips to Protect Your #Debit or #CreditCard; and #Cybercrime Classification and Measurement. https://llrx.com/2023/10/pete-recommends-weekly-highlights-on-cyber-security-issues-october-14-2023/

#Phishers Spoof #USPS, 12 Other Natl’ #Postal Services
Here’s a look at an extensive #SMS #phishing operation that tries to steal personal and financial data by spoofing the USPS, as well as postal services in at least a dozen other countries.
https://krebsonsecurity.com/2023/10/phishers-spoof-usps-12-other-natl-postal-services/

#SMS #Phishers Harvested Phone Numbers, Shipment Data from #UPS #Tracking Tool – Krebs on Security
#privacy

https://krebsonsecurity.com/2023/06/sms-phishers-harvested-phone-numbers-shipment-data-from-ups-tracking-tool/

#Fake #Shopping #Websites
https://www.stitcher.com/show/democracycast/episode/fake-shopping-websites-207806609
Mark Taylor-Canfield reports on the problem of fake shopping websites and how to identify them.
How to check a #domain’s history & ownership
How to identify and avoid #fakewebsites
One of the most common ways that #phishers lure users onto their sites is by adding #maliciouslinks to #phishing emails. So any time you think about clicking on a link embedded in your emails, be aware that there's a possibility that it could be illegitimate.