Author: HackWatchit

Ahead of this year’s Amazon Prime Day 2025 on July 8th, shoppers worldwide are preparing their wish lists. So are cyber criminals. Phishing attacks are already targeting innocent shoppers. In June alone, over 1,000 new domains with names resembling Amazon appeared online. Alarmingly, 87% of these have already been flagged as malicious or suspicious. Many of the domains include the term “Amazon Prime”, with one in every 81 of the risky domains containing this phrase. Why Domain Spam and Phishing Surge Ahead of Prime Day High-stakes shopping events like Prime Day are magnets for online fraud. Cyber criminals ramp up…

New data from Comparitech reported that in the first half of this year, 3,627 ransomware attacks were logged, marking a 47% increase from the 2,472 attacks recorded in the first half of last year. Organizations have experienced a 50% rise in attacks, but some industries have been hit even harder. Technology saw an 88% increase, retail jumped 85%, legal rose 71%, transportation climbed 66%, and manufacturing grew 64%. However, utilities was the only sector to report a decline, down 31%. “Of these 3,627 attacks, 445 were confirmed by the targeted organizations,” Rebecca Moody, head of data research at Comparitech, wrote…

Beau Bullock // In this series of posts I am going to detail multiple ways to gain access to domain user credentials without ever being on a target organization’s network. The first method involves exploiting password reuse issues where a user might have reused the same password they used for their corporate domain account on another external service. The second method is what I think is a far more interesting way of gathering user credentials that involves discovering a target organization’s username schema, followed by password spraying user accounts against an externally facing service that is hosted by the target…

In brief The labor market was stronger than expected in June, with U.S. employers adding 147,000 nonfarm jobs in June, while the unemployment rate ticked down to 4.2%. That extinguished hopes of an interest rate cut later this month, with traders penciling in a 4.7% chance on Thursday, from 24% a day before. Concerns about the country’s finances and pressure on Fed Chair Powell are still bolstering Bitcoin’s price, Grayscale’s head of research said. The price of Bitcoin wavered on Thursday after a hotter-than-expected jobs report pointed to a resilient U.S. labor market, squashing hopes of interest rate cuts later…

A Barracuda Networks analysis of unsolicited and malicious emails sent between February 2022 to April 2025 indicates 14% of the business email compromise (BEC) attacks identified were similarly created using a large language model (LLM). The post Analysis Surfaces Increased Usage of LLMs to Craft BEC Attacks appeared first on Security Boulevard.

A new report from SentinelLabs, released on July 2, 2025, reveals a sophisticated cyberattack campaign targeting Web3 and cryptocurrency companies. Threat actors aligned with North Korea are aggressively exploiting macOS systems with a newly discovered malware called NimDoor, utilizing complex, multi-stage attacks and encrypted communications to remain undetected. The research, authored by Phil Stokes and Raffaele Sabato and shared with Hackread.com, highlights the attackers’ shift towards less common, cross-platform programming languages like Nim. This change complicates efforts to detect and analyse their malicious activities. The group also uses AppleScript in clever ways, not just for the initial breach but also…

tools for data visualization and exploration have allowed me to iterate way quicker on my computer vision projects, especially when the problems I am faced with are not straightforward and I need to make algorithm or design decisions based on dynamic time-varying signals. These signals can often be challenging to analyze by just looking at rapidly changing numbers plotted on the screen or saved in a table. While working on some of these problems, I explored the built-in interactive elements from OpenCV, but apart from some sliders the options there are very limited, especially when trying to integrate some animated…

In recognition of Independence Day and the enduring sacrifice of military families, the Transportation Security Administration (TSA) has announced a multi-faceted initiative to enhance the travel experience for members of the U.S. military community. Starting this summer, TSA and its TSA PreCheck® enrollment providers, CLEAR, IDEMIA and Telos, will honor Gold Star family members by waiving the enrollment fee for TSA PreCheck. Gold Star families have lost a loved one in military service to the United States—spouses, parents, children and siblings who carry forward the legacy of their fallen heroes. This gesture represents TSA’s profound respect for their sacrifice and aims to…

SCATTERED SPIDER, an eCrime adversary, has recently broadened its target scope to include the aviation sector, in addition to its established focus on the insurance and retail industries, as observed by CrowdStrike Services. Throughout Q2 2025, SCATTERED SPIDER’s activities have primarily centered on U.S.-based insurance and retail entities, along with U.K.-based retail entities. However, incidents in late June 2025, specifically targeting U.S.-based airlines, demonstrated tactics, techniques, and procedures (TTPs) consistent with the adversary’s previous operations. Overview of SCATTERED SPIDER TTPs The adversary used help desk voice-based phishing in almost all observed 2025 incidents to compromise Microsoft Entra ID, single sign-on…