Advertisement
ClickFix Social Engineering Clusters Target Windows and macOS Systems
Insikt Group identifies five ClickFix clusters using obfuscated commands to exploit native system tools via fake browser error overlays on Windows and macOS.
Azure Monitor Alert Abuse: Detecting Callback Phishing Campaigns
Threat actors are abusing Microsoft Azure Monitor Action Groups to send legitimate-looking callback phishing emails to bypass traditional security filters.
Professional Refund Fraud Economy Targets Major E-Commerce Retailers
An analysis of the professional refund-as-a-service economy, detailing TTPs used by fraudsters to exploit retailer return policies and payment platforms.
LeakNet Ransomware: ClickFix Exploitation and Deno Loader Analysis
LeakNet ransomware leverages ClickFix social engineering and Deno-based in-memory loaders to bypass traditional security controls and deploy payloads.
LeakNet Ransomware: Stealthy Exploitation via Deno and ClickFix
LeakNet ransomware adopts ClickFix social engineering and the Deno runtime for stealthy initial access and loader deployment in corporate environments.
LiveChat Abuse: Phishing Campaign Targets PayPal and Amazon Users
Threat actors are leveraging legitimate LiveChat platforms to impersonate PayPal and Amazon support agents, stealing credit card and personal data.
ClickFix Campaigns Deliver MacSync macOS Infostealer via Fake AI Tools
Threat actors use ClickFix social engineering tactics to deploy the MacSync infostealer on macOS systems via fraudulent AI software installers.
Ghanaian National Pleads Guilty in $100M BEC and Fraud Ring Case
A Ghanaian man has pleaded guilty to his role in a global $100 million fraud ring targeting US entities through business email compromise and romance scams.
LastPass Phishing Campaign Targets Master Passwords via Fake Alerts
LastPass warns of a new phishing campaign using fraudulent security alerts to steal master passwords. Learn how to identify and mitigate these vault threats.
Meta Files Lawsuits Against Global Celeb-Bait Scam Networks
Meta takes legal action against advertisers in Brazil, China, and Vietnam, disabling accounts and domains used in large-scale celebrity-bait fraud schemes.
SLH Recruits Women for $1,000 IT Help Desk Vishing Attacks
Scattered LAPSUS$ Hunters (SLH) are offering financial incentives to recruit women for vishing campaigns targeting corporate IT help desks and IAM systems.