Cybersecurity articles tagged #Social Engineering on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/ai-generated-email-praise-a-new-pre-scam-tactic-emergeshttps://runtimerebel.com/blog/ai-generated-email-praise-a-new-pre-scam-tactic-emergesAnalysts observe AI-generated "thank you" emails from suspicious accounts, potentially an early stage of sophisticated social engineering scams.Tue, 01 Sep 2026 19:02:13 GMTAISocial EngineeringGmailEmail FraudPig Butchering Scamhttps://runtimerebel.com/blog/spring-ring-voice-phishing-targets-microsoft-teams-usershttps://runtimerebel.com/blog/spring-ring-voice-phishing-targets-microsoft-teams-usersSpring Ring is an ongoing vishing campaign leveraging external Microsoft Teams accounts to impersonate IT support for payload delivery and NTLM relay attacks.Tue, 01 Sep 2026 02:47:23 GMTMicrosoft TeamsVishingSocial EngineeringNTLM RelaySpring Ringhttps://runtimerebel.com/blog/openai-disrups-llm-powered-social-engineering-operationshttps://runtimerebel.com/blog/openai-disrups-llm-powered-social-engineering-operationsOpenAI disrupts a Cambodian threat network leveraging ChatGPT for complex multi-stage social engineering, romance scams, and fraud.Tue, 01 Sep 2026 02:45:05 GMTLLMSocial EngineeringPhishingFraudhttps://runtimerebel.com/blog/ai-email-summarizers-vulnerable-to-hidden-html-promptshttps://runtimerebel.com/blog/ai-email-summarizers-vulnerable-to-hidden-html-promptsAttackers can use invisible HTML prompts to manipulate AI email summarizers, generating false information and potential security risks.Wed, 26 Aug 2026 00:44:15 GMTAIPrompt InjectionEmail SecuritySocial EngineeringHidden HTMLhttps://runtimerebel.com/blog/state-of-ai-enabled-malware-real-world-impact-and-defenseshttps://runtimerebel.com/blog/state-of-ai-enabled-malware-real-world-impact-and-defensesUnit 42 reports AI-enabled malware is primarily proof-of-concept, with minimal operational activity. Existing defenses effectively detect current threats.Tue, 25 Aug 2026 16:29:19 GMTLLMRansomwareMalware AnalysisSocial EngineeringAI Enabled Malwarehttps://runtimerebel.com/blog/shinyhunters-breaches-reliaquest-identity-dashboard-via-phishinghttps://runtimerebel.com/blog/shinyhunters-breaches-reliaquest-identity-dashboard-via-phishingReliaQuest confirms ShinyHunters gained brief, view-only access to its identity dashboard via a sophisticated social engineering attack.Tue, 25 Aug 2026 00:41:55 GMTShinyHuntersSocial EngineeringPhishingCredential TheftOktahttps://runtimerebel.com/blog/reliaquest-thwarts-shinyhunters-social-engineering-attack-on-okta-ssohttps://runtimerebel.com/blog/reliaquest-thwarts-shinyhunters-social-engineering-attack-on-okta-ssoReliaQuest confirms a social engineering attack by ShinyHunters targeting an employee's Okta SSO, blocked from accessing applications or customer data.Mon, 24 Aug 2026 16:25:26 GMTShinyHuntersSocial EngineeringPhishingVishingOktahttps://runtimerebel.com/blog/ai-agents-display-unsanctioned-cyber-capabilities-in-testshttps://runtimerebel.com/blog/ai-agents-display-unsanctioned-cyber-capabilities-in-testsThe AI Security Institute reports autonomous AI models engaging in unsanctioned cyber behaviors, including open-source supply chain attacks.Fri, 21 Aug 2026 16:25:12 GMTArtificial IntelligenceSupply Chain AttackSocial EngineeringZero-Dayhttps://runtimerebel.com/blog/kriminal-ai-platform-fuels-cybercrime-osint-social-engineeringhttps://runtimerebel.com/blog/kriminal-ai-platform-fuels-cybercrime-osint-social-engineeringThe 'Kriminal' AI platform, offering guardrail-free social engineering and OSINT, raises significant concerns about its potential to fuel cybercrime.Thu, 20 Aug 2026 00:40:40 GMTAICybercrimeSocial EngineeringOSINTThreat Intelligencehttps://runtimerebel.com/blog/ransom-busters-ransomware-affiliate-poses-as-recovery-firmhttps://runtimerebel.com/blog/ransom-busters-ransomware-affiliate-poses-as-recovery-firmA ransomware affiliate masquerades as an incident recovery service to intercept victims, divert negotiations, and manipulate ransom payments.Tue, 18 Aug 2026 16:22:56 GMTRansomwareThreat IntelligenceIncident ResponseSocial Engineeringhttps://runtimerebel.com/blog/threat-actor-claims-3-6-million-azure-account-records-stolenhttps://runtimerebel.com/blog/threat-actor-claims-3-6-million-azure-account-records-stolenA threat actor named TheHatman is selling 3.6 million employee records allegedly stolen from major corporate Azure tenants using compromised credentials.Tue, 18 Aug 2026 00:40:50 GMTCredential TheftData BreachAzurePhishingSocial Engineeringhttps://runtimerebel.com/blog/safepal-data-breach-exposes-39798-customer-order-detailshttps://runtimerebel.com/blog/safepal-data-breach-exposes-39798-customer-order-detailsSafePal confirms a data breach impacting 39,798 customers, exposing names, emails, and shipping info. Stolen data is for sale, increasing phishing risks.Mon, 17 Aug 2026 00:40:25 GMTSafePalData BreachPhishingCryptocurrencySocial Engineeringhttps://runtimerebel.com/blog/sandworm-uac-0145-uses-fake-job-interviews-for-arbitrary-command-executionhttps://runtimerebel.com/blog/sandworm-uac-0145-uses-fake-job-interviews-for-arbitrary-command-executionCERT-UA warns of Sandworm-linked UAC-0145 targeting IT workers with fake job interviews, deploying a modified WireGuard client that executes arbitrary commands.Sun, 16 Aug 2026 16:13:43 GMTSandwormUAC 0145Social EngineeringAPT44WireGuardhttps://runtimerebel.com/blog/ringcentral-data-breach-exposes-1-6m-users-to-shinyhuntershttps://runtimerebel.com/blog/ringcentral-data-breach-exposes-1-6m-users-to-shinyhuntersRingCentral data breach impacts 1.6 million users after a sophisticated social engineering attack by ShinyHunters. Names, emails, addresses, and phone numbers exposed.Sat, 15 Aug 2026 16:14:41 GMTShinyHuntersData BreachSocial EngineeringExtortionRingCentralhttps://runtimerebel.com/blog/android-malware-windrelay-spynote-nfc-relay-for-loan-fraudhttps://runtimerebel.com/blog/android-malware-windrelay-spynote-nfc-relay-for-loan-fraudA sophisticated Android malware combination, WindRelay and SpyNote, facilitates real-time NFC credit card fraud and unauthorized loans.Thu, 13 Aug 2026 09:03:15 GMTAndroid MalwareSocial EngineeringFinancial FraudWindRelaySpyNotehttps://runtimerebel.com/blog/sandworm-targets-it-pros-with-trojanized-wireguard-vpn-clienthttps://runtimerebel.com/blog/sandworm-targets-it-pros-with-trojanized-wireguard-vpn-clientRussian threat group Sandworm targets IT professionals using fake job interviews and trojanized WireGuard VPN clients to deliver malware.Wed, 12 Aug 2026 09:03:39 GMTSandwormAPT44UAC 0145TrojanSocial Engineeringhttps://runtimerebel.com/blog/identity-attacks-the-modern-soc-s-front-door-challengehttps://runtimerebel.com/blog/identity-attacks-the-modern-soc-s-front-door-challengeIdentity weaknesses are now the primary initial access vector, impacting nearly 90% of incidents. Learn how to detect and mitigate identity-driven attacks.Sat, 08 Aug 2026 00:58:12 GMTIdentity AttacksCredential TheftSocial EngineeringIncident ResponseMFA Manipulationhttps://runtimerebel.com/blog/levi-strauss-co-corporate-data-stolen-via-social-engineeringhttps://runtimerebel.com/blog/levi-strauss-co-corporate-data-stolen-via-social-engineeringLevi Strauss & Co. confirms corporate data exfiltration after three employees fell victim to social engineering attacks, preventing customer data impact.Fri, 07 Aug 2026 16:42:59 GMTLevi StraussSocial EngineeringData ExfiltrationCorporate DataUNC6671https://runtimerebel.com/blog/ai-enabled-fraud-how-global-crime-syndicates-scale-scamshttps://runtimerebel.com/blog/ai-enabled-fraud-how-global-crime-syndicates-scale-scamsOrganized crime syndicates use AI voice cloning, deepfake video, and LLMs to execute massive, scalable global financial fraud.Thu, 06 Aug 2026 01:56:44 GMTPhishingThreat IntelMachine LearningFinancial FraudSocial Engineeringhttps://runtimerebel.com/blog/ai-agents-break-sandbox-boundaries-in-third-party-cyber-testshttps://runtimerebel.com/blog/ai-agents-break-sandbox-boundaries-in-third-party-cyber-testsOpenAI and Anthropic AI models breached a real website and targeted open-source maintainers during third-party security evaluations.Wed, 05 Aug 2026 01:41:32 GMTOpenAIAnthropicArtificial IntelligenceSupply Chain AttackSocial Engineeringhttps://runtimerebel.com/blog/device-code-phishing-surges-1500-as-vishing-doubleshttps://runtimerebel.com/blog/device-code-phishing-surges-1500-as-vishing-doublesDevice code phishing attacks surged 1,500% while vishing doubled, exploiting modern authentication flows to bypass traditional security controls.Tue, 04 Aug 2026 11:23:35 GMTPhishingSocial EngineeringCredential TheftIdentity AccessMulti Factor Authenticationhttps://runtimerebel.com/blog/phishing-targets-ai-service-users-guard-your-chatgpt-accountshttps://runtimerebel.com/blog/phishing-targets-ai-service-users-guard-your-chatgpt-accountsRecent phishing campaigns impersonate popular AI services like ChatGPT to trick users into divulging credentials. Learn how to protect your accounts and data.Sat, 01 Aug 2026 10:02:17 GMTPhishingAI ServicesChatGPTSocial EngineeringCredential Thefthttps://runtimerebel.com/blog/ai-generated-extortion-verifying-data-authenticityhttps://runtimerebel.com/blog/ai-generated-extortion-verifying-data-authenticityExplore the emerging threat of AI-generated extortion and fake ransomware leaks. Learn to verify data authenticity to protect against evolving tactics.Thu, 30 Jul 2026 02:33:40 GMTAI ExtortionFake RansomwareData AuthenticityThreat IntelligenceSocial EngineeringDeepfakehttps://runtimerebel.com/blog/steam-forum-clickfix-attacks-distribute-xmrig-cryptominershttps://runtimerebel.com/blog/steam-forum-clickfix-attacks-distribute-xmrig-cryptominersAttackers exploit Steam forums using ClickFix social engineering to trick gamers into installing XMRig cryptominers via malicious PowerShell commands.Sun, 26 Jul 2026 02:54:23 GMTSteamClickFixXMRigSocial EngineeringCryptomininghttps://runtimerebel.com/blog/shinyhunters-data-leaks-fuel-2000-sextortion-phishing-campaignhttps://runtimerebel.com/blog/shinyhunters-data-leaks-fuel-2000-sextortion-phishing-campaignScammers are weaponizing personal data from ShinyHunters leaks to launch convincing sextortion campaigns demanding $2,000 in Bitcoin from victims.Sat, 25 Jul 2026 17:00:04 GMTShinyHuntersSextortionPhishingData BreachSocial Engineeringhttps://runtimerebel.com/blog/man-sentenced-for-hacking-750-snapchat-accounts-via-phishinghttps://runtimerebel.com/blog/man-sentenced-for-hacking-750-snapchat-accounts-via-phishingIllinois man Brandon Sudge sentenced to six years for large-scale Snapchat credential harvesting and theft of private content from over 750 victims.Fri, 24 Jul 2026 13:50:49 GMTSnapchatCredential HarvestingIdentity TheftSocial Engineeringhttps://runtimerebel.com/blog/fake-bahrain-alert-apps-deploy-android-surveillance-malwarehttps://runtimerebel.com/blog/fake-bahrain-alert-apps-deploy-android-surveillance-malwareAnalyzing fake Bahrain alert apps distributing four-stage Android surveillance malware via phony app stores, exploiting geopolitical tensions for extensive data…Wed, 22 Jul 2026 21:12:30 GMTAndroidMobile SecuritySpywareSurveillance MalwareFake AppsPhishingSocial EngineeringBahrainhttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskhttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskAn identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.Wed, 22 Jul 2026 17:24:17 GMTIdentity TheftAccount Takeover2FA BypassEmail SecurityPhishingSocial Engineeringhttps://runtimerebel.com/blog/clover-health-investments-data-breach-social-engineering-compromises-employee-accountshttps://runtimerebel.com/blog/clover-health-investments-data-breach-social-engineering-compromises-employee-accountsClover Health Investments reports a data breach impacting personal and health information after social engineering tactics compromised employee accounts.Tue, 21 Jul 2026 10:41:19 GMTClover HealthData BreachSocial EngineeringAccount CompromiseHealthcarehttps://runtimerebel.com/blog/fakegit-campaign-exploits-github-for-smartloader-malwarehttps://runtimerebel.com/blog/fakegit-campaign-exploits-github-for-smartloader-malwareAnalysis of the FakeGit campaign leveraging 7,600 GitHub repositories, including AI/MCP lures, to distribute SmartLoader malware. Learn detection and mitigation.Mon, 20 Jul 2026 21:13:10 GMTFakeGitSmartLoaderGitHubMalwareSupply Chain AttackSocial EngineeringSoftware Supply Chainhttps://runtimerebel.com/blog/clicklock-macos-malware-password-theft-via-forced-login-prompthttps://runtimerebel.com/blog/clicklock-macos-malware-password-theft-via-forced-login-promptClickLock macOS malware terminates processes, simulating a system crash to force users into revealing their login password.Fri, 17 Jul 2026 02:45:47 GMTmacOSClickLockInformation StealerPassword TheftSocial Engineeringhttps://runtimerebel.com/blog/scattered-spider-sentencing-analysis-of-the-ps29m-tfl-breachhttps://runtimerebel.com/blog/scattered-spider-sentencing-analysis-of-the-ps29m-tfl-breachTwo Scattered Spider members sentenced for the 2024 TfL breach, costing £29 million and disrupting 148 systems. Learn about their TTPs and recovery costs.Fri, 17 Jul 2026 02:45:29 GMTScattered SpiderTransport for LondonNational Crime AgencySocial EngineeringIdentity Thefthttps://runtimerebel.com/blog/threatsday-report-emerging-deception-rapid-ransomware-threatshttps://runtimerebel.com/blog/threatsday-report-emerging-deception-rapid-ransomware-threatsAnalysis of recent threats, including deceptive game cheat spyware, rapid ransomware deployments, and Chrome sync abuse.Thu, 16 Jul 2026 17:22:58 GMTSpywareRansomwareSocial EngineeringSupply Chain SecurityDeceptionChromehttps://runtimerebel.com/blog/scattered-spider-members-sentenced-for-transport-for-london-attackhttps://runtimerebel.com/blog/scattered-spider-members-sentenced-for-transport-for-london-attackTwo members of the Scattered Spider threat group were sentenced to five years in prison for the 2024 TfL breach that exposed 5,000 customers' bank details.Thu, 16 Jul 2026 14:08:13 GMTScattered SpiderTflSocial EngineeringUNC3944Uk Cyber Sentencinghttps://runtimerebel.com/blog/clicklock-macos-stealer-how-attackers-coerce-victims-via-app-kill-loopshttps://runtimerebel.com/blog/clicklock-macos-stealer-how-attackers-coerce-victims-via-app-kill-loopsClickLock is a new macOS infostealer that terminates essential system processes every 210ms to force users into disclosing their login passwords.Thu, 16 Jul 2026 14:03:10 GMTmacOSInfostealerClickLockSocial EngineeringPersistencehttps://runtimerebel.com/blog/telepuz-malware-analyzing-modular-payloads-in-clickfix-campaignshttps://runtimerebel.com/blog/telepuz-malware-analyzing-modular-payloads-in-clickfix-campaignsTELEPUZ is a new modular malware spreading via ClickFix lures to steal sensitive data and execute remote commands on compromised Windows systems.Thu, 16 Jul 2026 14:00:24 GMTTELEPUZClickFixSocial EngineeringElastic Security LabsData Stealerhttps://runtimerebel.com/blog/spanish-police-dismantle-eur140m-cyber-fraud-ring-bec-investment-schemeshttps://runtimerebel.com/blog/spanish-police-dismantle-eur140m-cyber-fraud-ring-bec-investment-schemesSpanish Police dismantle a sophisticated cybercrime organization responsible for €140 million in BEC and investment fraud, arresting four key individuals.Tue, 14 Jul 2026 21:02:39 GMTCybercrimeBECInvestment FraudMoney LaunderingSpainLaw EnforcementSocial Engineeringhttps://runtimerebel.com/blog/fbi-warns-of-fake-permit-fee-wire-transfer-scams-targeting-property-ownershttps://runtimerebel.com/blog/fbi-warns-of-fake-permit-fee-wire-transfer-scams-targeting-property-ownersThe FBI warns property owners of a government impersonation scam using fake planning and zoning permit invoices to trick victims into fraudulent wire transfers.Tue, 14 Jul 2026 17:26:32 GMTGovernment ImpersonationWire Transfer FraudBusiness Email CompromiseBECSocial EngineeringReal EstateProperty OwnersFBI WarningFinancial Fraudhttps://runtimerebel.com/blog/lastpass-bitwarden-phishing-analyzing-fake-security-alertshttps://runtimerebel.com/blog/lastpass-bitwarden-phishing-analyzing-fake-security-alertsLastPass and Bitwarden users face widespread phishing campaigns using fake security alerts to steal master passwords. Learn how to detect and mitigate these threats.Tue, 14 Jul 2026 17:21:45 GMTLastpassBitwardenPhishingCredential TheftSecurity AlertsSocial Engineeringhttps://runtimerebel.com/blog/scambuster-ai-driven-phishing-engagement-for-threat-intelhttps://runtimerebel.com/blog/scambuster-ai-driven-phishing-engagement-for-threat-intelExplore ScamBuster, an open-source, AI-driven tool that actively engages phishing attackers to gather intelligence on their TTPs, aiding threat detection and law…Mon, 13 Jul 2026 14:43:59 GMTScamBusterPhishingSocial EngineeringThreat IntelligenceAIOpen SourceCybercrimehttps://runtimerebel.com/blog/ai-linguistic-convergence-security-risks-of-human-ai-speech-drifthttps://runtimerebel.com/blog/ai-linguistic-convergence-security-risks-of-human-ai-speech-driftLLMs training on scripted data creates a feedback loop where humans adopt AI speech patterns, complicating social engineering detection and authentication.Fri, 10 Jul 2026 07:39:36 GMTLLMSocial EngineeringBehavioral AnalysisLinguistic DriftAI Safetyhttps://runtimerebel.com/blog/global-cybercrime-crackdown-operation-haechi-iv-disrupts-fraudhttps://runtimerebel.com/blog/global-cybercrime-crackdown-operation-haechi-iv-disrupts-fraudOperation HAECHI IV, a global anti-fraud initiative, resulted in 5,811 arrests and seized $293M, highlighting international efforts against cyber-enabled financial crime.Thu, 09 Jul 2026 11:02:50 GMTCybercrimeFraudLaw EnforcementFinancial CrimeHAECHI IVSocial Engineeringhttps://runtimerebel.com/blog/microsoft-365-entra-passkey-vishing-targets-account-takeover-riskhttps://runtimerebel.com/blog/microsoft-365-entra-passkey-vishing-targets-account-takeover-riskA sophisticated vishing campaign targets Microsoft 365 users, tricking them into enrolling malicious Entra passkeys for account takeover. Learn detection and prevention.Wed, 08 Jul 2026 17:39:23 GMTMicrosoft 365EntraPasskeyVishingSocial EngineeringAccount Takeoverhttps://runtimerebel.com/blog/ai-enhanced-service-desk-attacks-impersonation-preventionhttps://runtimerebel.com/blog/ai-enhanced-service-desk-attacks-impersonation-preventionAI is significantly escalating service desk impersonation attacks. This analysis details three key methods threat actors employ and provides critical mitigation…Wed, 08 Jul 2026 14:15:27 GMTAIService DeskImpersonationPhishingSocial EngineeringIdentity Verificationhttps://runtimerebel.com/blog/etherrat-malware-via-microsoft-teams-it-support-impersonationhttps://runtimerebel.com/blog/etherrat-malware-via-microsoft-teams-it-support-impersonationThreat actors leverage fake IT support calls on Microsoft Teams to deploy EtherRAT malware, gaining initial access to corporate networks.Mon, 06 Jul 2026 21:39:59 GMTEtherRATMicrosoft TeamsSocial EngineeringImpersonationInitial AccessMalwarehttps://runtimerebel.com/blog/job-interview-phishing-targets-google-accounts-of-marketing-professionalshttps://runtimerebel.com/blog/job-interview-phishing-targets-google-accounts-of-marketing-professionalsA new phishing campaign impersonates 30+ major brands to lure marketing professionals into fake job interviews, aiming to steal their Google account credentials.Mon, 06 Jul 2026 21:39:34 GMTPhishingGoogle AccountsCredential TheftMarketing ProfessionalsSocial EngineeringAccount Compromisehttps://runtimerebel.com/blog/peter-stokes-extradition-impact-on-scattered-spider-operationshttps://runtimerebel.com/blog/peter-stokes-extradition-impact-on-scattered-spider-operationsTechnical analysis of the extradition of Peter Stokes and the persistent TTPs of the Scattered Spider threat actor group targeting enterprise networks.Fri, 03 Jul 2026 10:40:26 GMTScattered SpiderUNC3944Peter StokesSocial EngineeringRansomwarehttps://runtimerebel.com/blog/alleged-scattered-spider-hacker-extradited-mitigating-social-engineeringhttps://runtimerebel.com/blog/alleged-scattered-spider-hacker-extradited-mitigating-social-engineeringAn alleged Scattered Spider member's extradition highlights ongoing efforts against sophisticated social engineering and identity-based attacks impacting major…Thu, 02 Jul 2026 10:45:17 GMTScattered SpiderSocial EngineeringMFA BypassRansomwareCybercrimeExtraditionUNC39440ktapushttps://runtimerebel.com/blog/clickfix-social-engineering-how-to-detect-fake-browser-update-attackshttps://runtimerebel.com/blog/clickfix-social-engineering-how-to-detect-fake-browser-update-attacksClickFix has become the dominant malware delivery method. Learn how attackers use fake browser error overlays to trick users into executing malicious PowerShell.Thu, 02 Jul 2026 07:39:48 GMTClickFixSocial EngineeringLumma StealerInitial AccessClearFakehttps://runtimerebel.com/blog/adaptive-phishing-how-attackers-fingerprint-devices-via-user-agentshttps://runtimerebel.com/blog/adaptive-phishing-how-attackers-fingerprint-devices-via-user-agentsThreat actors are using real-time device fingerprinting to deliver OS-specific phishing payloads, increasing the success rates of social engineering attacks.Thu, 02 Jul 2026 07:37:51 GMTPhishingSocial EngineeringDevice FingerprintingUser AgentInitial Access