, it could be a threat to corporate networks if victims take the bait and the malware is installed, one security professional noted.

“The complexity and sophistication of the techniques make it very hard for the average consumer to detect a malicious attempt,” Purandar Das, CEO and co-founder at Sotero, an encryption-based data security solutions company, wrote in an email to Threatpost. “You could potentially see a path where they are able to collect business information once the malware is deployed and active.”

‘Targeting consumers is a successful path for cybercriminals, as people seem to let their guard down more with electronic communication than real-life communication, noted another security professional. The average person often falls for online scams if they are familiar with the social-media platform claiming to be the message sender,” James McQuiggan, security awareness advocate at security firm KnowBe4, wrote in an email to Threatpost.

“When they see it, most people will recognize someone trying to scam them in real life,” he said, citing an example of New York City street merchant trying to sell a passer-by a fake brand-name watch or handbag. “Most people will know they are fake and carry on walking. McQuiggan observed. See Also: Offensive Security Tool: Scapy
However, many people might not recognize an email claiming to have a voicemail from a popular messaging app or another social media platform is a scam and go along with it, he said.

“Users are too accepting of emails,” McQuiggan said. “There needs to be more education for everyone, not just within organizations, to spot electronic social engineering or scams, so it is apparent like someone who is trying to sell a fake watch or handbag on the street.”
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Hacking stories: MafiaBoy, the hacker who took down the Internet
Source: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/f956-article-211015-apple-body-text-90x90.jpg Apple paid out $36,000 bug bounty for HTTP request smuggling flaws3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/3e41-article-210226-vmware-body-text-90x90.jpg VMware warns of critical vulnerabilities in multiple products4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/A-New-Borat-RAT-Capable-Of-Conducting-Ransomware-DDOS-Activities-90x90.png No-Joke Borat RAT Propagates Ransomware, DDoS5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/php-pear-hacked-packages-malware-90x90.png Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 years6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/php-hack-90x90.jpg PHP bug allows attackers to bypass domain filters, stage DoS attacks against servers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/apple-iphone-hacking-90x90.jpg Apple emergency update fixes zero-days used to hack iPhones, Macs1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Google-Campus-90x90.jpg Google Chrome Bug Actively Exploited as Zero-Day2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 weeks ago
* http[...]

___________________________
@hacking_Attack
@Hacking_Video

s://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy2 weeks ago
The post Attackers Spoof WhatsApp Voice-Message Alerts to Steal Info first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Process Injection using CreateRemoteThread API
https://www.reddit.com/r/redteamsec/comments/u13bx2/process_injection_using_createremotethread_api/

submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://tbhaxor.com/createremotethread-process-injection/) [comments] (https://www.reddit.com/r/redteamsec/comments/u13bx2/process_injection_using_createremotethread_api/)

___________________________
@hacking_Attack
@Hacking_Video

SVG SSRFs and saga of bypasses

Hi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…Continue reading on InfoSec Write-ups »
Read more...

SVG SSRFs and saga of bypasses
https://infosecwriteups.com/svg-ssrfs-and-saga-of-bypasses-777e035a17a7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/svg-ssrfs-and-saga-of-bypasses-777e035a17a7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

SVG SSRFs and saga of bypasses

Hi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…Continue reading on InfoSec Write-ups »
Read more...

[1/3] Brute-Force Protection Bypass @ GitLab

This is the first of three reports describing my findings from a review I did of Gitlab around 6 months ago. I thought I’d start with the…Continue reading on Medium »
Read more...

Spring4Shell

Spring4Shell and Spring Cloud RCE vulnerability ScannerContinue reading on Medium »
Read more...

[1/3] Brute-Force Protection Bypass @ GitLab
https://medium.com/@_ip_/1-3-brute-force-protection-bypass-gitlab-15a17909bb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is the first of three reports describing my findings from a review I did of Gitlab around 6 months ago. I thought I’d start with the…Continue reading on Medium » (https://medium.com/@_ip_/1-3-brute-force-protection-bypass-gitlab-15a17909bb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Spring4Shell
https://medium.com/@reconshell.com/spring4shell-880e32ef71da?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Spring4Shell and Spring Cloud RCE vulnerability ScannerContinue reading on Medium » (https://medium.com/@reconshell.com/spring4shell-880e32ef71da?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Software Reverse Engineering: Ripping Apart Bomb Binary

https://cdn-images-1.medium.com/max/1229/1*c_XHLtRJNpWn39go6fwM5w.png
Baby, I hate little secrets you keep from me x_x

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[1/3] Brute-Force Protection Bypass @ GitLab

https://cdn-images-1.medium.com/max/600/1*b5dtRAJ1Y-yZKvqGBQn8iQ.jpeg
This is the first of three reports describing my findings from a review I did of Gitlab around 6 months ago. I thought I’d start with the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Software Reverse Engineering: Diffusing Phase 1

https://cdn-images-1.medium.com/max/1229/1*c_XHLtRJNpWn39go6fwM5w.png
Baby, I hate little secrets you keep from me x_x

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Software Reverse Engineering: Diffusing Phase 2

https://cdn-images-1.medium.com/max/1229/1*c_XHLtRJNpWn39go6fwM5w.png
Baby, I hate little secrets you keep from me x_x

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Spring4Shell

https://cdn-images-1.medium.com/max/850/1*K88NZStxoHaR27AkKLUcqQ.png
Spring4Shell and Spring Cloud RCE vulnerability Scanner

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video