Fake Canva home page leads to browser lock


In a previous blog post, Malwarebytes researchers showed how fraudsters were leveraging features from the very company (Microsoft) they were impersonating.

Malwarebytes Labs continue this series with another clever trick abusing Canva, a popular online tool for graphic design. This time, the scammers registered an account on Canva to create a new design that, is in fact, a replica of the Canva home page. As victims come from a malicious ad, they land on this deceiving page that lures them into interacting with it. The result: as soon as you click on the image, your browser is hijacked with a fake Microsoft alert.

Read more…
Source: Malwarebytes Labs


Sign up for our Newsletter


Related:

  • Code leaks are causing an influx of new ransomware actors

    August 7, 2023

    Ransomware gangs are consistently rebranding or merging with other groups, as highlighted in our 2022 Year in Review, or these actors work for multiple ransomware-as-a-service (RaaS) outfits at a time, and new groups are always emerging. This trend is already continuing this year. Since 2021, there have been multiple leaks of ransomware source code and builders ...

  • Ukraine-Linked Group Claims It Hacked Website Of Moscow Property Registration Bureau

    August 7, 2023

    A Ukraine-linked hacker group said on Telegram on August 7 that it had hacked the website of Moscow’s municipal property registration bureau (MosgorBTI) overnight, saying “the information about state officials, politicians, military, and special services officers who support the Ukraine war had been handed to Ukraine’s defense forces.” The MosgorBTI’s website has yet to comment on ...

  • Cyberattack disrupted hospitals, health care in Pennsylvania, 4 other states

    August 6, 2023

    Hospitals and clinics in several states on Friday began the time-consuming process of recovering from a cyberattack that disrupted their computer systems, forcing some emergency rooms to shut down and ambulances to be diverted. Many primary care services at facilities run by Prospect Medical Holdings remained closed on Friday as security experts worked to determine the ...

  • FBI Investigating Cyber Attack Affecting Connecticut Hospitals

    August 4, 2023

    “Prospect Medical Holdings Inc. recently experienced a data security incident that has disrupted our operations,” said Nina Kruse, ECHN’s vice president for communications and public affairs. “Upon learning of this, we took our systems offline to protect them and launched an investigation with the help of third-party cybersecurity specialists,” she said. The FBI’s field office in New ...

  • Capita shares plummet 11 per cent as contractor reveals cyber attack cost £25m

    August 4, 2023

    Capita shares in slumped 11.4 per cent on Friday morning after it said a recent data breach could cost it up to £25m. The government contractor, which provides data and IT outsourcing processes, said this morning it expects a major cyber attack in March could cost it £20-25m, as an investigation nears its close. Read more… Source: City ...

  • What’s happening in the world of crimeware: Emotet, DarkGate and LokiBot

    August 3, 2023

    The malware landscape keeps evolving. New families are born, while others disappear. Some families are short-lived, while others remain active for quite a long time. In order to follow this evolution, Kaspersky researchers rely both on samples that they detect and their monitoring efforts, which cover botnets and underground forums. While doing so, the researchers found ...