BleepingComputer reports that the FBI has warned about potential scams targeted at the applicants of the Federal Student Aid program, which could result in the theft of personal and payment information, as well as cash.
Threat actors could exploit the Federal Student Aid program, which has just opened for applications on Tuesday, to create fraudulent application form-impersonating websites, facilitate various fraud schemes, and deliver "benefit eligibility" phishing messages, according to the FBI.
"Cybercriminals and fraudsters use their schemes to receive payment for services they will not provide or collect victim information they can then use to facilitate a variety of other crimes," said the FBI.
Individuals looking to apply for the program have been advised that applications are free and do not require any account logins or any document uploads during its initial phase. Additional information and documents are being sought in the next stage of the process, with the [email protected], [email protected], and [email protected] email addresses used to communicate with beneficiaries.
New attacks by Chinese state-backed threat operation Camaro Dragon, which overlaps with Mustang Panda, have involved the novel Go-based TinyNote malware, which creates various persistency tasks to ensure host access despite its lacking sophistication, according to The Hacker News.
News media organizations, academic entities, and think tanks have been warned by U.S. and South Korean intelligence agencies regarding the cyberespionage attacks by North Korean state-sponsored hacking operation Kimsuky, also known as TA406 and Thallium, reports The Record, a news site by cybersecurity firm Recorded Future.
The commercial attack tool’s use by bad actors has faded after an initial flurry, while Cobalt Strike remains the go-to post-exploitation tool for many.