Advertisement
Social Engineering: Warning Against Deceptive Consultancy Offers
Security professionals are targeted by social engineering tactics disguised as lucrative consultancy or job offers, exploiting trust for internal access.
Cisco Talos Announces Executive Threat Detection Service
Cisco Talos launches Executive Threat Detection to protect leadership teams from targeted social engineering, whaling, and stealthy compromises.
Law Enforcement Eavesdropping via WhatsApp and Signal Device Linking
Examine how law enforcement exploits desktop companion features to bypass messaging app encryption on WhatsApp and Signal via device linking.
Malicious Custom GPTs Used for RAT Delivery via ChatGPT Lures
Threat actors are leveraging malicious custom GPTs on ChatGPT and Google domains as lures to deliver Remote Access Trojans (RATs) in ClickFix-style campaigns.
Star Blizzard Employs RedFlick for CosmicPulse Backdoor Deployment
Russian state actor Star Blizzard deploys the CosmicPulse backdoor via a new RedFlick phishing technique, impacting over 100 organizations globally.
Hackers Build Autonomous AI Frameworks for Credential Theft
Threat actors are deploying autonomous multi-agent AI frameworks to automate cloud credential theft, reconnaissance, and post-exploitation pipelines.
Advertisement
ASCII Smuggling in Phishing: Invisible Unicode Evasion
Attackers deploy ASCII smuggling with invisible Unicode characters in high-volume phishing campaigns, evading email filters to target finance-themed lures.
39 Methods Compromise Passkey Authentication: Threat Analysis
Discover 39 published methods compromising passkey authentication, focusing on ecosystem flaws, UI manipulation, and enrollment abuse.
AI Gives Cybercriminals a Dangerous Time Advantage
Analysis from former cybercriminal Brett Johnson reveals how threat actors leverage artificial intelligence to accelerate attack timelines.
Exchange Exploit, Dropbox Breach, & Cloud Phishing Campaigns
SecurityWeek's roundup highlights a critical Exchange Server exploit, Dropbox account compromises, and cloud phishing. Urgent action is advised.
Phishing Campaign Leverages Invisible Unicode to Bypass Filters
A high-volume phishing campaign uses invisible Unicode tag characters to evade email security filters, mimicking financial lures for fraud and credential harvesting.
Microsoft Teams Abuse, The Gentlemen Ransomware, and PhaaS Trends
Analysis of social engineering campaigns via Microsoft Teams, The Gentlemen ransomware operations, and emerging phishing-as-a-service kits.
Silver Fox Malware Campaign Impersonates Software Vendors
An active Silver Fox malware campaign uses fake software download sites to disable Windows Update and weaken Microsoft Defender defenses.
Faronics Deploy Abused by Phishing Actors to Install ScreenConnect
Phishing actors are abusing the legitimate Faronics Deploy endpoint management tool to gain remote access and install ScreenConnect via malicious installers.
Threat Actors Prefer Repeatable Playbooks Over Novel Exploits
Analysis of modern cyberattacks reveals threat actors increasingly favour scalable, repeatable playbooks over novel exploit development.
Polymorphic Phishing Page Analysis: JavaScript Obfuscation Flaws
Analysis of a polymorphic phishing page utilizing heavy JavaScript obfuscation and variable scope bugs that cause browser loops.
Deobfuscating Malicious JavaScript for Threat Analysis
Understanding JavaScript obfuscation techniques used in phishing and malware. Learn static and dynamic deobfuscation methods to uncover malicious intent.
OpenAI Disrups LLM-Powered Social Engineering Operations
OpenAI disrupts a Cambodian threat network leveraging ChatGPT for complex multi-stage social engineering, romance scams, and fraud.
Hackers Abuse npm Mirrors to Host Phishing Redirects
Threat actors exploit npm and its mirroring platforms like UNPKG to host malicious HTML pages, impersonating Cloudflare CAPTCHAs for phishing redirects.
ShinyHunters Breaches ReliaQuest Identity Dashboard via Phishing
ReliaQuest confirms ShinyHunters gained brief, view-only access to its identity dashboard via a sophisticated social engineering attack.
ReliaQuest Thwarts ShinyHunters Social Engineering Attack on Okta SSO
ReliaQuest confirms a social engineering attack by ShinyHunters targeting an employee's Okta SSO, blocked from accessing applications or customer data.
Grandoreiro Banking Trojan: New Evasion Tactics in Mexico
Grandoreiro banking Trojan resurfaces in Mexico, employing advanced evasion tactics after a law enforcement takedown to target financial users.
FTP Banners Abused to Deliver E4del and PINHOLE RATs
Threat actors are using FTP server banners to hide commands, delivering new Windows remote access trojans E4del and PINHOLE via LNK-based infection chains.
ToxicPanda 2.0 Android Malware Abuses Wireless ADB and VPN
ToxicPanda 2.0 Android malware uses VPN permissions to block Google Play and abuses Wireless ADB to gain shell access and deploy overlays.