Netcrook
Security Awareness & Social Engineering / Europe
Password Security Gets a Price Cut, But the Real Value Is in Better Habits
Proton Pass is discounting its Family plan, and the offer is a reminder that the strongest security tools still depend on how people use them.
When Antivirus Starts Hunting Lies: Avast’s AI Pitch Shows Where Scam Defense Is Headed
A discount may be the headline hook, but the technical story is the shift from malware blocking to detecting phishing, fake websites, and synthetic media before users act.
Aphish Trap Built on Trusted Tools: How a Fake Invoice Chain Turned AnyDesk Into a Quiet Foothold
A targeted email lure tied to aerospace branding reportedly used a password-protected archive, a multi-stage dropper, and legitimate remote-access software to create a stealthy access path.
When an Invoice Becomes an Access Pass: The Hidden Power of Legitimate Remote Tools
A fake business document and a trusted support app can be enough to create durable access, especially when defenders do not tightly govern remote software.
World Cup Lures, Fake Rewards, Real Card Theft
A World Cup-themed phishing run is turning event excitement into a payment-data trap, using counterfeit reward pages and email lures that can look legitimate enough to get past routine checks.
Passkeys Move Enterprise Logins Off the Password Trapdoor
A NordPass discount may be the headline hook, but the deeper story is the shift from reusable passwords to phishing-resistant authentication that can shrink the value of stolen credentials.
Opera Puts a Speed Bump in the Clipboard Trap
The browser’s new Paste Protect feature targets a social-engineering pattern that turns copied text into risky command execution.
Opera’s New Paste Protect Targets a Quietly Dangerous Copy-Paste Attack Path
Opera has added a default-on browser defense aimed at clipboard hijacking and command injection, a reminder that the paste action can carry more risk than it appears.
Opera Puts a Safety Rail Around the Clipboard
Paste Protect is built into the browser, enabled by default on Windows, macOS, and Linux, and aimed at cutting off clipboard hijacking and ClickFix-style code injection before a user can paste trouble into place.
Opera Draws a Line at the Paste Prompt
With Paste Protect, Opera is trying to blunt ClickFix-style lures that turn social engineering into a command execution problem.
When Anti-Phishing Drills Become a Privacy Problem
Awareness campaigns are meant to harden people against phishing, but the data they generate can pull security teams into GDPR territory if they are not tightly scoped and retained.
Fake Police Warnings Turn SIM Swapping Into a Phishing Hook
An alert about messages using the Commissariato di P.S. Online brand shows how criminals can borrow institutional trust to make a fraud narrative feel urgent and believable.
When Support Becomes the Attack Surface: Messaging App Phishing Turns Trust Against Users
A phishing wave aimed at commercial messaging apps shows how account recovery, not encryption, can become the weakest point in secure communication.
Fake Help, Real Access: The Messaging Trap Behind a Wartime Espionage Claim
A long-running support-impersonation scheme shows how one convincing conversation can matter more than any exploit against the app itself.
The Paste Trap: How ClickFix Turns a Simple User Action into Code Execution
Italy’s national CSIRT is warning about an ongoing ClickFix phishing pattern that pushes victims to run malicious commands themselves, a reminder that social engineering can be as dangerous as any exploit.
When a Fine Notice Becomes a Trap: Phishing Built on Legal Fear
A new payment-lure campaign turns the language of sanctions and official notices into a social-engineering weapon, betting that urgency will outrun verification.
Italy’s New Anti-Addiction Push Treats Screen Habits as a Family Security Problem
A government awareness campaign, a parental vademecum, and a short spot place digital dependence in the spotlight, with child screen use framed as a behavior issue that starts at home.
Invoice Lure in a Certified Inbox: Why PEC Phishing Still Works
A malicious email campaign dressed as electronic invoicing shows how trusted business channels can be turned into low-friction phishing paths.
Como’s Quiet Countermove Against the Human Side of Cyber Fraud
A Polizia di Stato awareness project in Como puts scam prevention in the spotlight, showing how cyber defense often begins with recognition, not reaction.
SMS Lures Wear a Public-Service Mask in Italy
A phishing wave themed around SEND and pagoPA shows how attackers can turn trusted civic branding into a believable trap.