Advertisement
Cross-Platform Clipboard Hijacker: Fake Reputation Campaign Targets Crypto
Analysis of a cross-platform clipboard hijacker spread via elaborate fake reputation campaigns on GitHub, YouTube, and VirusTotal to steal cryptocurrency.
Crypto Clipper Campaign Abuses AI Narrators and Fake Reviews
An unknown threat actor leverages paid posts, fake reviews, AI narrators, and phishing sites to distribute crypto clipper malware. Learn defense tactics.
ClickFix Campaigns Expand Delivery with New Loaders and Fake Lures
ClickFix campaigns are now deploying BabaDeda, Lorem Ipsum, and Potemkin loaders through fake browser update social engineering lures.
Imposter Scams: Analyzing Record $3.5B Projected Losses in 2025
The FTC warns that imposter scams will cause $3.5 billion in losses by 2025. Understand evolving TTPs, target demographics, and effective mitigation strategies.
AI-Native OS: The Future of Social Engineering Defense
Explore how AI-native operating systems are poised to transform social engineering defenses, shifting vigilance from users to automated systems.
Sniper Dz Phishing-as-a-Service Targets MENA Region via Facebook
Sniper Dz phishing campaigns leverage fake Facebook accounts and browser alerts to steal credentials from users across the Middle East and North Africa.
Advertisement
Lumma Stealer Distributed via Fake EditPro AI Image Generator
Threat actors are leveraging a fake AI image generator website to distribute Lumma Stealer malware targeting both Windows and macOS systems.
Chinese Smishing Network 'Outsider' Leverages Gemini AI for Phishing
Google sues a Chinese smishing network operating 'Outsider' PhaaS, accused of using Gemini AI to craft sophisticated phishing messages targeting Americans.
Sophisticated Phishing: AI Elevates Attack Quality Amidst Volume Drop
Phishing attack volume decreased 20%, yet AI-driven sophistication increases risk. Organizations must adapt defenses to counter targeted, high-quality social engineering.
Bypassing Identity Verification: Mitigating Phishing & MFA Fatigue
Attackers exploit weak identity verification through phishing, MFA fatigue, and social engineering. Learn best practices to secure access.
Silent Ransom Group Targets US Law Firms via Vishing and Intrusions
Silent Ransom Group (Luna Moth) targets US law firms using vishing and physical intrusions for data extortion. Technical analysis and mitigation strategies.
UNC3753 Targets US Law Firms with Vishing & Physical Intrusions
UNC3753 (Luna Moth) leverages vishing and physical office intrusions to steal sensitive data from US law firms and professional services, leading to swift extortion.
Five Eyes Warning: Chinese Intelligence Job Recruitment Tactics
Five Eyes agencies issue an advisory on Chinese intelligence officers using fake job offers on professional sites to recruit personnel with security clearances.
Meta AI Chatbot Exploited for Instagram Account Takeover
Attackers manipulate Meta's AI support chatbot to reset Instagram passwords and hijack accounts via unauthorized email updates and location spoofing.
VS Code One-Click GitHub Token Theft via URI Handler Exploitation
A flaw in Visual Studio Code allows attackers to steal GitHub authentication tokens with a single click. Learn the technical details and mitigation steps.
DOJ Disrupts Southeast Asia Crypto Fraud and Seizes $3.8 Million
US DOJ Disruption Week dismantles millions of accounts used in Southeast Asia crypto fraud, freezing assets and disrupting infrastructure targeting Americans.
Cyber Insurance Market Shifts: Rates Drop, Exclusions Widen
Organizations face reduced cyber insurance coverage despite dropping rates. Exclusions for social engineering attacks like ClickFix are widening, demanding policy…
Abusing Google DoubleClick for DesckVB RAT Delivery — Detection Guide
A new malspam campaign leverages Google DoubleClick redirects to bypass security filters and distribute DesckVB RAT, highlighting trust-based evasion tactics.
Meta AI Support Abuse Leads to Instagram Account Hijacking
Attackers exploit Meta AI support tools to bypass traditional security and hijack Instagram profiles, leaving legitimate users locked out of their accounts.
New Phishing Campaign Exploits SVG Attachments to Evade Filters
Security researchers report a wave of phishing emails using malicious SVG attachments to deliver scripts and bypass email security gateways. Learn how to defend.
Meta AI Support Bot Exploited for Instagram Account Takeovers
Hackers manipulated Meta's AI support assistant to bypass authentication and seize high-profile Instagram accounts, including government entities.
Quishing Evasion: Malicious QR Codes Bypassing Security Filters
A technical analysis of how malicious QR codes (quishing) bypass email security filters and actionable mitigation steps for security operations centers.
ChatGPT Share Link Abuse: Fake Outages Deliver Malware
Threat actors leverage ChatGPT share links to host deceptive outage pages, prompting users to download malware disguised as an official desktop app.
The Com: Analyzing the Intersection of Cybercrime and Physical Violence
Analysis of The Com, a criminal ecosystem using social engineering and SIM swapping to fund violent activities, sextortion, and neo-Nazi accelerationism.