Social Engineering
Ongoing coverage on Social Engineering.
Latest coverage
PS5 Security Flaw Confirmed, More PlayStation Accounts Hacked
A security flaw on the PlayStation 5 has been confirmed as the cause of numerous PlayStation account hacks, primarily through social engineering scams involving PlayStation Support agents. Scammers can gain account control by providing recent purchase history, bypassing two-factor authentication and passkeys. Prominent figures like Colin Moriarty have been affected, with some users losing access to their accounts permanently.
'It's Nuts': Major PS5 Security Vulnerability Exposed, And We're All At Risk
A significant security vulnerability has been exposed within Sony's PlayStation Network processes, potentially putting all users at risk. The flaw relies on social engineering tactics, where customer service representatives can be persuaded to grant account access with minimal personal information, such as transaction dates or console serial numbers. This method bypasses traditional security measures and has led to accounts being permanently lost.
Prominent PS5 Podcaster's Account Hacked, Social Engineering Concerns Amplified
Prominent PlayStation 5 podcaster Colin Moriarty's account was hacked, highlighting ongoing social engineering concerns within the PlayStation community. Moriarty, an ex-IGN editor, reported his account was compromised after his email and two-factor authentication were disabled, with hackers subsequently targeting his co-host. This incident echoes previous reports where hackers allegedly gained access by providing minimal information, such as transaction IDs, to customer service.
There's a devious hacking scheme that involves a hijacked Microsoft Teams account, a fake IT helpdesk, and a covert…
A new hacking scheme involves hijacked Microsoft Teams accounts impersonating IT helpdesks to trick users into downloading malicious files. This social engineering tactic uses a covert PowerShell command to unpack a WinPython environment, leading to the ModeloRAT malware infecting PCs without detection. The malware aims to embed itself in corporate environments to harvest data and establish connections to other devices.
A 'JobStealer' Trojan virus has popped up that attacks PCs via fake job interviews
A new Trojan virus named 'JobStealer' is targeting PCs by posing as a fake job interview invitation. Attackers use spoofed video conferencing apps and social media accounts to trick users into downloading malicious software that steals data, including cryptocurrency wallets. Versions for macOS, iOS, Android, and Linux are also noted, though not yet widely distributed.
US victims lost nearly $21 billion to cybercrime last year says FBI with crypto and AI 'complaints among the…
The FBI reported that US victims lost nearly $21 billion to cybercrime in 2025, with cryptocurrency and artificial intelligence-related complaints being among the costliest. Over one million complaints were filed, a nearly 20% increase from the previous year. AI-led scams, including deepfake impersonations and sophisticated phishing attempts, are becoming increasingly prevalent and effective.
CS2 Players Getting Wrecked by Fake Steam Workshop Scams
Counter-Strike 2 players are being targeted by sophisticated scams that use fake Steam Workshop pages to steal login credentials. These sites meticulously replicate the appearance of legitimate Workshop pages, including skin previews and voting buttons, to trick users into entering their Steam login details. The scam exploits the value of in-game items and the community's tendency to support creators, highlighting the need for players to verify URLs and question login requests.
