The recent appearance of email and password lists on developer sites suggests amateur phishing rather than sophisticated attacks. ' Evidence from the initial Hotmail list reveals numerous fake entries, including blank passwords, which wouldn't originate from compromised servers. ' Security analysis points to these credentials likely coming from a Hispanic demographic, based on common passwords...

Security Alert: New Physical Phishing Tactic Targeting Financial Institutions Recent reports highlight a concerning development in cybersecurity threats aimed at financial institutions. Credit unions have been targeted by an innovative phishing scheme that combines traditional mail delivery with malware distribution. The scheme involves physical letters purportedly from regulatory authorities...

Yesterday, Tom Warren of Neowin uncovered what seemed to be credentials for Windows Live Hotmail accounts, posted on Pastebin.com, a site typically used by developers for sharing code snippets. Warren promptly informed both the public and Microsoft about the findings. Microsoft responded late in the day, suggesting the breach likely stemmed from a phishing scheme. This incident overwhelmed...