Dymo (TPEOficial)

Never Stop Exploring The World - AI and cybersecurity product development

[Dymo (TPEOficial) @tpeoficialllc]

(2/2) (rather than https://t.co/3euF6M0ClM) so that the orders do not appear in the https://t.co/3euF6M0ClM order history.

The malicious actors typically purchase gift cards and also buy items to ship to you and fabricate reviews to improve their rankings on Amazon.

[Dymo (TPEOficial) @tpeoficialllc]

(1/2)🚨📦New Amazon phishing campaign targeting users in Spain!

During one of our daily fraud scans, we discovered a significant campaign in Spain involving Amazon phishing, aimed at stealing account credentials and placing orders on https://t.co/jDOshxmU7F...

[FJRG2007 ツ @fjrg2007]

Vibe-coding is doing a lot of damage to the security and privacy of users who use AI-generated software without review.

[Dymo (TPEOficial) @tpeoficialllc]

What is happening with the Spanish Tax Agency? ⚠️

This is one of the thousands of websites we’ve found impersonating the Tax Agency. 🚨 Be extremely careful if you receive an email from them, and never click on suspicious links or share personal information.

[Dymo (TPEOficial) @tpeoficialllc]

Can you imagine if Dymo expanded its database and soon supported detection of malicious dependencies?

Stay tuned.

[FJRG2007 ツ @fjrg2007]

.com domains continue to dominate in terms of phishing, but there are still many more.

https://t.co/dzOqS1ggX1

[Dymo (TPEOficial) @tpeoficialllc]

Can you imagine a browser extension that manages all your browser security for you?

All the extra security you need in your browser coming soon.

[Dymo (TPEOficial) @tpeoficialllc]

What are the most commonly used TLDs, countries, and hosts for fraud worldwide?

Find out now in our updated paper: https://t.co/s7JBWDTLjP

@JAMESWT_WT @RedDrip7 @PrakkiSathwik @volrant136 @suyog41 @skocherhan

[Dymo (TPEOficial) @tpeoficialllc]

‼️New phishing campaign involving package deliveries

In recent days, we have collected more than 20,000 domains related to parcel phishing, such as SEUR, which tricks you into paying for a package you will never receive.

https://t.co/qx26G5PNSA

[Dymo (TPEOficial) @tpeoficialllc]

⚠️ RCE from the Teleparty extension

At Dymo, we have detected an RCE vulnerability in the popular Teleparty browser extension that allows users to take control of another user's tab.

[Dymo (TPEOficial) @tpeoficialllc]

A new phishing scheme is posing as https://t.co/3UNHcaxnXN to collect personal and payment info through cloned sites.
Double-check URLs and avoid suspicious messages.

[Dymo (TPEOficial) @tpeoficialllc]

We’ve spotted a phishing campaign impersonating https://t.co/9Ii11JOCTF. Fake pages mimic the official portal to steal user data.

Stay cautious — verify all links before clicking.

[Dymo (TPEOficial) @tpeoficialllc]

⛔We’ve detected an active campaign with 35,000+ NEW websites impersonating Booking and other brands.

They use fake CAPTCHAs to trick users and inject malicious code. In addition to impersonating Booking with fake reservations.

Check any web: https://t.co/JzYLTe0Jgg

#scams

[Dymo (TPEOficial) @tpeoficialllc]

🔒 We found a security vulnerability in the e-Nidhi Bihar portal that could expose users’ emails 📧.
Reported responsibly ✅ to the authorities.

Read more on LinkedIn 👉 https://t.co/GZCnbENIT8
#CyberSecurity #Infosec #ResponsibleDisclosure

[Dymo (TPEOficial) @tpeoficialllc]

🚨 We found a vulnerability in the Vinnytsia Municipal Portal email system that could be exploited for phishing campaigns. Stay cautious and verify communications!

🔗 More info: https://t.co/lp24nVwq39

#Cybersecurity #Phishing #Vinnytsia #DigitalSafety

[Dymo (TPEOficial) @tpeoficialllc]

At Dymo, an automated security scan detected a potential issue with https://t.co/5uMSzP9aYr subdomains that could be exploited for phishing. We responsibly reported it to @DGTes & @incibe_cert

https://t.co/SyQhCxTWdN

[Dymo (TPEOficial) @tpeoficialllc]

🚨 Found an email auth vulnerability in US Social Security systems. Attackers could send phishing emails appearing official. Issue responsibly reported. 🔐

#CyberSecurity #Phishing

[Dymo (TPEOficial) @tpeoficialllc]

🚨 At Dymo we dismantled a fraudulent investment campaign using 50K+ phone numbers in USA 🇺🇸 & India 🇮🇳. The scheme was also exploited for money laundering.

Our tech blocked the infrastructure, accounts & preserved evidence. #Fraud #AML #Cybersecurity

[Dymo (TPEOficial) @tpeoficialllc]

@JAMESWT_WT We bypass geofenced domains in our daily scans and know there are more thanks to the world’s largest fraud validation DB. We pixelate domains for safety, as some users click them unknowingly.

[Dymo (TPEOficial) @tpeoficialllc]

⛔We’ve detected an active campaign with 15,000+ NEW websites impersonating Booking and other brands.

They use fake CAPTCHAs to trick users and inject malicious code.

Check any web: https://t.co/JzYLTe0Jgg

#scams #Booking #captcha @JAMESWT_WT