Advertisement
AI-Enhanced Service Desk Attacks: Impersonation & Prevention
AI is significantly escalating service desk impersonation attacks. This analysis details three key methods threat actors employ and provides critical mitigation…
SCMBANKER Malware: Analyzing ClickFix Lures Targeting Mexican Banks
Elastic Security Labs tracks REF6045, deploying SCMBANKER malware via fake ClickFix CAPTCHA pages to compromise Mexican banking users.
EvilTokens Ghost Phishing Targets Microsoft 365 via Browser Decryption
Analysis of the EvilTokens ghost phishing campaign targeting Microsoft 365 users via browser-side decryption to bypass traditional email security gateways.
Phishing Campaign Uses Nested Redirects to Hijack Google Accounts
Marketing professionals are being targeted by a sophisticated phishing campaign using nested redirects and fake job offers to compromise Google credentials.
Job Interview Phishing Targets Google Accounts of Marketing Professionals
A new phishing campaign impersonates 30+ major brands to lure marketing professionals into fake job interviews, aiming to steal their Google account credentials.
ARToken PhaaS Exposes EvilTokens' M365 Phishing Toolkit
ARToken PhaaS, an affiliate of EvilTokens, offers advanced Microsoft 365 phishing capabilities, including MFA bypass. Learn about its TTPs and how to defend.
Advertisement
Adaptive Phishing: How Attackers Fingerprint Devices via User-Agents
Threat actors are using real-time device fingerprinting to deliver OS-specific phishing payloads, increasing the success rates of social engineering attacks.
Ousaban Banking Trojan: Phishing Lures Target Iberian Bank Users
Ousaban, a Brazilian banking trojan, targets Windows users in Spain and Portugal via fake PDF phishing lures, aiming to steal financial credentials.
Phantom Squatting: How Attackers Weaponize AI-Hallucinated Domains
Security researchers have identified 'Phantom Squatting,' a technique where attackers register non-existent domains hallucinated by AI for phishing.
DCloud Uni-App Exploited: 236K Sites Fuel Crypto Scams & Phishing
Over 236,000 DCloud Uni-App sites are co-opted for widespread crypto scams, pig butchering, and phishing operations. Learn how to detect and mitigate these threats.
WordPress Formidable Forms Abused to Distribute Malicious PDF Files
Attackers are leveraging the WordPress Formidable Forms plugin to host malicious PDF documents, bypassing security filters to deliver phishing and malware.
Russian Intelligence Steals Messaging Credentials via SMS Lures
Ukraine and the FBI expose a long-running Russian intelligence campaign using fake support messages to compromise officials' messaging accounts.
FBI Warns: Russian APTs Target Signal Backup Keys via Phishing
FBI and CISA warn of Russian intelligence targeting Signal users. Attackers phish for backup recovery keys, enabling full account takeover and message history access.
ThreatsDay Bulletin: Proxyware, Legacy Flaws, and AI Crime Trends
Analysis of recent cybersecurity threats including smart TV proxyware, a 24-year curl bug, and AI-driven cybercrime trends impacting enterprise security.
2026 World Cup Scams: Detecting SEO Hijacking and Purchase Fraud
Threat actors are using SEO hijacking and compromised domains to scale purchase scams targeting the 2026 FIFA World Cup. Learn how to identify these TTPs.
eBanking Phishing Using IPv4-Mapped IPv6 Addresses Detected
Analysis of a sophisticated eBanking phishing campaign targeting a major Belgian bank, leveraging IPv4-mapped IPv6 addresses for obfuscation.
Operation Escaneo: Hybrid Espionage and Cybercrime Trends in LatAm
Analysis of Operation Escaneo, a threat group blending intelligence collection with cybercrime across Latin America using njRAT and AsyncRAT variants.
NastyC2 npm Packages, AI Abuse & macOS Threats Identified
Analysis of NastyC2 npm supply chain attacks, Claude chat abuse for malware, memory-resident macOS threats, and device-code phishing.
Crypto Clipper Campaign Abuses AI Narrators and Fake Reviews
An unknown threat actor leverages paid posts, fake reviews, AI narrators, and phishing sites to distribute crypto clipper malware. Learn defense tactics.
Imposter Scams: Analyzing Record $3.5B Projected Losses in 2025
The FTC warns that imposter scams will cause $3.5 billion in losses by 2025. Understand evolving TTPs, target demographics, and effective mitigation strategies.
ScarCruft Deploys NarwhalRAT via Fake Microsoft Security Alerts
North Korean threat actor ScarCruft (APT37) is deploying NarwhalRAT via spear-phishing emails that mimic official Microsoft Account security notifications.
North Korean APT Targets Developers via Malicious Tooling
North Korean threat cluster Contagious Interview exploits developer recruitment and code review phishing to deliver malware via tainted dev tools.
Sophisticated Phishing: AI Elevates Attack Quality Amidst Volume Drop
Phishing attack volume decreased 20%, yet AI-driven sophistication increases risk. Organizations must adapt defenses to counter targeted, high-quality social engineering.
NSO Group Phishing Operations Persist Against WhatsApp Users
NSO Group continues to target WhatsApp users with phishing attacks in violation of court orders. Learn how to detect NSO Group phishing attacks today.