Advertisement
ThreatsDay Report: Emerging Deception & Rapid Ransomware Threats
Analysis of recent threats, including deceptive game cheat spyware, rapid ransomware deployments, and Chrome sync abuse.
Scattered Spider Members Sentenced for Transport for London Attack
Two members of the Scattered Spider threat group were sentenced to five years in prison for the 2024 TfL breach that exposed 5,000 customers' bank details.
ClickLock macOS Stealer: How Attackers Coerce Victims via App Kill Loops
ClickLock is a new macOS infostealer that terminates essential system processes every 210ms to force users into disclosing their login passwords.
TELEPUZ Malware: Analyzing Modular Payloads in ClickFix Campaigns
TELEPUZ is a new modular malware spreading via ClickFix lures to steal sensitive data and execute remote commands on compromised Windows systems.
Spanish Police Dismantle €140M Cyber Fraud Ring: BEC & Investment Schemes
Spanish Police dismantle a sophisticated cybercrime organization responsible for €140 million in BEC and investment fraud, arresting four key individuals.
FBI Warns of Fake Permit Fee Wire Transfer Scams Targeting Property Owners
The FBI warns property owners of a government impersonation scam using fake planning and zoning permit invoices to trick victims into fraudulent wire transfers.
Advertisement
LastPass & Bitwarden Phishing: Analyzing Fake Security Alerts
LastPass and Bitwarden users face widespread phishing campaigns using fake security alerts to steal master passwords. Learn how to detect and mitigate these threats.
ScamBuster: AI-Driven Phishing Engagement for Threat Intel
Explore ScamBuster, an open-source, AI-driven tool that actively engages phishing attackers to gather intelligence on their TTPs, aiding threat detection and law…
AI Linguistic Convergence: Security Risks of Human-AI Speech Drift
LLMs training on scripted data creates a feedback loop where humans adopt AI speech patterns, complicating social engineering detection and authentication.
Global Cybercrime Crackdown: Operation HAECHI IV Disrupts Fraud
Operation HAECHI IV, a global anti-fraud initiative, resulted in 5,811 arrests and seized $293M, highlighting international efforts against cyber-enabled financial crime.
Microsoft 365 Entra Passkey Vishing Targets: Account Takeover Risk
A sophisticated vishing campaign targets Microsoft 365 users, tricking them into enrolling malicious Entra passkeys for account takeover. Learn detection and prevention.
AI-Enhanced Service Desk Attacks: Impersonation & Prevention
AI is significantly escalating service desk impersonation attacks. This analysis details three key methods threat actors employ and provides critical mitigation…
EtherRAT Malware via Microsoft Teams IT Support Impersonation
Threat actors leverage fake IT support calls on Microsoft Teams to deploy EtherRAT malware, gaining initial access to corporate networks.
Job Interview Phishing Targets Google Accounts of Marketing Professionals
A new phishing campaign impersonates 30+ major brands to lure marketing professionals into fake job interviews, aiming to steal their Google account credentials.
Peter Stokes Extradition: Impact on Scattered Spider Operations
Technical analysis of the extradition of Peter Stokes and the persistent TTPs of the Scattered Spider threat actor group targeting enterprise networks.
Alleged Scattered Spider Hacker Extradited: Mitigating Social Engineering
An alleged Scattered Spider member's extradition highlights ongoing efforts against sophisticated social engineering and identity-based attacks impacting major…
ClickFix Social Engineering: How to Detect Fake Browser Update Attacks
ClickFix has become the dominant malware delivery method. Learn how attackers use fake browser error overlays to trick users into executing malicious PowerShell.
Adaptive Phishing: How Attackers Fingerprint Devices via User-Agents
Threat actors are using real-time device fingerprinting to deliver OS-specific phishing payloads, increasing the success rates of social engineering attacks.
Shopify Shop App Abused for Callback Phishing Attacks
Attackers are exploiting the Shopify Shop app's order tracking features to launch callback phishing attacks, tricking users into installing remote access tools.
2026 FIFA World Cup Cyber Threats: Infrastructure & Phishing Analysis
An analysis of the cyber threat landscape for the 2026 FIFA World Cup, detailing infrastructure risks, social engineering, and mitigation strategies.
Scattered Spider Members Plead Guilty to Transport for London Attack
Two members of Scattered Spider pleaded guilty to the August 2024 Transport for London cyberattack, highlighting the group's social engineering efficacy.
Scattered Spider Members Plead Guilty in TfL Infrastructure Attack
Two members of the Scattered Spider threat group plead guilty to the 2024 Transport for London hack, exposing risks of identity-based social engineering.
WhatsApp Phishing Campaign Deploys VBScript to Compromise PCs
Attackers target WhatsApp users with malicious ZIP files disguised as business documents to deliver VBScript-based remote access malware.
WhatsApp VBScript Campaign Installs ManageEngine RMM — Technical Guide
Attackers are targeting WhatsApp Desktop users with malicious VBScripts to install ManageEngine RMM, enabling unauthorized remote access and control.