Advertisement
Ghostwriter Targets Ukraine with Geofenced PDF Phishing & Cobalt Strike
Ghostwriter (UAC-0057) leverages geofenced PDF phishing to deliver Cobalt Strike against Ukrainian government entities, combining espionage and influence.
Anatomy of E-Commerce Fraud: Detecting and Mitigating Phishing Sites
A technical analysis of fraudulent retail infrastructure, exploring domain spoofing, CDN obfuscation, and credit card exfiltration techniques.
Empowering Human Defenses: Addressing Threats Unstoppable by Tech
Cybersecurity defenses often overlook the human element. This analysis details how employees are the critical first line against advanced social engineering and insider…
YoroTrooper Campaign Hits 500+ Orgs: Espionage and Malware Tactics
Analysis of the multi-year YoroTrooper phishing campaign targeting critical infrastructure, aviation, and government sectors with custom malware stealers.
Neutralizing Patient Zero: Strategies to Prevent Stealth Breaches
Analyze how AI-driven social engineering creates a Patient Zero scenario and explore technical strategies to contain stealth breaches before total shutdown.
Google Ads Phishing Campaign Targets GoDaddy ManageWP Users
A persistent phishing campaign leverages malicious Google Ads to steal GoDaddy ManageWP credentials, risking extensive WordPress site compromises.
Advertisement
Gavril Sandu Extradited to US for Historical Phishing Scheme
Gavril Sandu, a Romanian national, faces US charges for a 2007-2008 phishing operation that targeted financial institutions and thousands of victims.
AitM Phishing Attacks Target US Organizations with Conduct Reports
Microsoft warns of a sophisticated AitM phishing campaign using fake conduct reports to bypass MFA and hijack Microsoft 365 user sessions.
Credential Theft: Microsoft Details Phishing Campaign Targeting 35k Users
Microsoft warns of a global phishing campaign targeting 35,000 users with code-of-conduct lures to steal authentication tokens across 13,000 organizations.
Stealthy Phishing Abuses ConnectWise ScreenConnect, AnyDesk RMM
Attackers leverage legitimate RMM tools like ConnectWise ScreenConnect and AnyDesk in a sophisticated phishing campaign, impacting over 80 organizations and evading…
Amazon SES Phishing Abuse: Evading Security Filters via AWS Infrastructure
Threat actors are increasingly exploiting Amazon Simple Email Service (SES) to bypass email security filters by leveraging high-reputation AWS domains.
VENOMOUS#HELPER Phishing Campaign Exploits SimpleHelp and ScreenConnect
VENOMOUS#HELPER phishing campaign targets over 80 organizations using SimpleHelp and ScreenConnect RMM tools for persistent unauthorized remote access.
Silver Fox APT: Tax-Themed Phishing Delivers ABCDoor to India, Russia
China-backed Silver Fox APT targets organizations in India and Russia with over 1,600 tax-themed phishing messages to deploy ABCDoor backdoor and ValleyRAT.
Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing
China-linked threat actor Silver Fox targets Russian and Indian organizations using tax-themed lures to deliver the novel ABCDoor malware via phishing waves.
Telegram Mini Apps Exploited for Crypto Scams and Malware Delivery
Threat actors are weaponizing Telegram Mini Apps to distribute Android malware and deploy sophisticated crypto drainers via TON blockchain exploits.
Bluekit Phishing Service: AI-Assisted Attacks and Mitigation
Analysis of the new Bluekit phishing service, its 40+ templates and AI features, and critical steps to detect and mitigate AI-assisted phishing campaigns.
Microsoft Outlook iOS Authentication Issues: Remediation and Risks
Microsoft resolves global Outlook.com outage but requires iOS Mail app users to re-authenticate. Learn how to secure accounts and mitigate phishing risks.
Robinhood Sign-Up Flaw Used for Phishing Injection - Analysis
Exploit of Robinhood's account creation process allowed attackers to inject phishing content into official emails, bypassing standard security filters.
26 FakeWallet Apps Infiltrate Apple App Store - Research Analysis
Researchers discover 26 malicious apps on the Apple App Store impersonating crypto wallets to steal seed phrases via trojanized software and browser redirects.
Chinese APT Leverages PlugX & ShadowPad with Cloud C2 for Mongolian Espionage
A Chinese state-sponsored APT is exploiting Microsoft Outlook, Slack, Discord, and file.io for C2, deploying PlugX and ShadowPad in espionage operations targeting…
Malicious Crypto Apps on Apple App Store Target Private Keys
Dozens of fake cryptocurrency wallet applications have been found in the Apple App Store, designed to phish users' recovery phrases and private keys, leading to…
Defending Against Identity-Based Attacks and Stolen Credentials
Identity-based attacks use stolen credentials to bypass security. Learn why these attacks are the primary entry point and how to mitigate the risk.
Microsoft Teams Abused in Helpdesk Impersonation Attacks: TTPs & Mitigations
Microsoft warns of helpdesk impersonation attacks via Teams external collaboration.
Apple ID Alerts Abused for Phishing via Legitimate Servers
Threat actors are exploiting Apple's account notification system to send authentic-looking phishing emails that bypass traditional spam filters and SPF checks.