Advertisement
Hotel Wi-Fi Campaigns Use CornFlake and ChocoShell Malware
Russian threat actor Midnight Blizzard targets hotel Wi-Fi networks using captive portal manipulation, DNS hijacking, and custom malware.
Phishing Targets AI Service Users: Guard Your ChatGPT Accounts
Recent phishing campaigns impersonate popular AI services like ChatGPT to trick users into divulging credentials. Learn how to protect your accounts and data.
Interpol's I-GRIP System Curtails Fraudulent Payments: A Threat Intel Brief
Explore Interpol's I-GRIP system, a global initiative enabling rapid freezing of fraudulent payments and enhancing international cooperation against cyber-enabled…
OAuth 2.0 Device Code Phishing Escalates to Industrial Threat
Device code phishing, exploiting the OAuth 2.0 device authorization grant, is rapidly stealing access tokens. Learn how to defend against this growing threat.
Chrome Security Update and SonicWall Targeted in AI-Driven Campaigns
Analysis of 370 Chrome vulnerabilities and active SonicWall targeting, highlighting the rise of AI-powered phishing and automated DNS hijacking threats.
ShinyHunters Targeting Healthcare: Data Theft Surges, Health-ISAC Warns
Health-ISAC warns of increasing ShinyHunters data theft attacks on healthcare and med-tech organizations. Learn about TTPs and critical mitigations.
Advertisement
ShinyHunters Data Leaks Fuel $2,000 Sextortion Phishing Campaign
Scammers are weaponizing personal data from ShinyHunters leaks to launch convincing sextortion campaigns demanding $2,000 in Bitcoin from victims.
BlueNoroff Zoom Phishing Kit Targets Crypto Wallets
BlueNoroff uses a custom phishing kit to profile crypto wallets before delivering malware through impersonated Zoom and Microsoft Teams platforms.
Zimbra Zero-Day Exploited by Laundry Bear Against US & Ukraine
Russian state-sponsored group 'Laundry Bear' exploits a Zimbra zero-day via 'half-click' phishing, targeting US and Ukrainian entities for credential theft and backdoor…
Bing Ads Promote Fake Claude App, Deliver SectopRAT Malware
A malvertising campaign on Bing Search is distributing a fake Claude AI desktop app, leading to SectopRAT malware infections. Verify software sources.
Zimbra Zero-Click Exploitation by Russian APT for Email Theft
CISA warns of Russian APT Laundry Bear (Void Blizzard) exploiting a patched Zimbra zero-click flaw combined with phishing to compromise email servers for data…
Brazilian Banking Trojan Expansion into Portugal Targets Businesses
Portuguese businesses face increased risk from Brazilian banking trojans leveraging shared language for phishing and credential theft.
Fake Bahrain Alert Apps Deploy Android Surveillance Malware
Analyzing fake Bahrain alert apps distributing four-stage Android surveillance malware via phony app stores, exploiting geopolitical tensions for extensive data…
Email Account Takeover via 2FA Compromise: Mitigating Identity Theft Risk
An identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.
Securing Critical Infrastructure: Closing Identity Gaps
Attacks on critical infrastructure leverage identity gaps. This analysis details common vulnerabilities and how Zero Trust principles can enhance sector security.
UAC-0145 ClickFix Strategy: How Sandworm Targets Ukraine with Malware
Russian threat actor UAC-0145 uses deceptive ClickFix CAPTCHAs to deliver data-stealing malware to Ukrainian targets. Learn how to detect and mitigate these TTPs.
Text Salting: Hidden Text Tactics Bypass AI Email Filters
Over 1 million emails are leveraging text salting techniques, embedding hidden characters to bypass AI and LLM-based email security filters, posing a significant…
Dutch Police Bust €100 Million Global Investment Fraud Syndicate
Analysis of the Dutch police operation against an international investment fraud ring that defrauded over 50,000 victims using deceptive trading platforms.
Identity Attacks & MFA Bypass: The New Ransomware Entry Point
Identity-based attacks, particularly email phishing, are now the leading cause of ransomware infections.
OkoBot Framework Injects Phishing Modules into Ledger and Trezor Apps
The OkoBot malware framework targets Windows users to steal hardware wallet seed phrases by injecting malicious pages directly into legitimate desktop apps.
LastPass & Bitwarden Phishing: Analyzing Fake Security Alerts
LastPass and Bitwarden users face widespread phishing campaigns using fake security alerts to steal master passwords. Learn how to detect and mitigate these threats.
ScamBuster: AI-Driven Phishing Engagement for Threat Intel
Explore ScamBuster, an open-source, AI-driven tool that actively engages phishing attackers to gather intelligence on their TTPs, aiding threat detection and law…
Evilginx Operations Exposed: Misconfigured Server Leaks M365 Phishing Kits
A misconfigured Python server exposed three live Evilginx phishing operations targeting Microsoft 365, revealing the attacker's toolkit and session cookies.
Analyzing Remcos RAT Delivery via Malicious LNK Files
Technical analysis of how threat actors use deceptive LNK files and obfuscated PowerShell to deliver Remcos RAT, including detection and mitigation strategies.