It’s as true today as it was back then, only the threats have intensified. For example, a modified version of the popular KeePass password manager has been spotted spreading ransomware.

The fake password manager exported all of the saved passwords in a cleartext database, which was later relayed to the attackers through the Cobalt Strike beacon.

Microsoft phishing scams use fake security alerts and links that redirect to credential-stealing pages with warning signs, ...

"When KeePass database data was opened; account, login name, password, website, and comments information is also exported in CSV format under %localappdata% as .kp.

Unrequested password reset messages are often an early warning sign that someone may be trying to access your account. In some cases, the alert is real. In others, it’s a fake message designed ...

"Amazon regularly educates our hundreds of millions of customers about scam prevention best practices to keep them safe from scams," a spokesperson noted. "Our team is diligently working to protect ...

Phishing emails mimicking PyPI target developers to steal credentials via fake sites. Users urged to stay alert.