phishing

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

cybercrime, Don't miss, email security, Hot stuff, Huntress, Microsoft 365, News, phishing /

Microsoft 365 accounts compromised at 79 organizations, no passwords needed 2026-10-23 at 14:45 By Sinisa Markovic An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers […]

Microsoft 365 accounts compromised at 79 organizations, no passwords needed Read More »

Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks

Cisco, Don't miss, Email, News, phishing, tips /

Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks 2026-10-22 at 13:59 By Zeljka Zorz A Dell order confirmation lands in your inbox and it looks pretty legitimate: it comes from Dell’s order domain, passes DKIM and DMARC checks, uses Dell’s real template, and confirms a $736.09 purchase of Microsoft Project Standard […]

Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks Read More »

Quarantined, but still on your calendar: The explosion of invite-based attacks

Check Point, Don't miss, email security, Hot stuff, News, phishing, Sublime Security /

Quarantined, but still on your calendar: The explosion of invite-based attacks 2026-10-20 at 15:18 By Zeljka Zorz There has been a sharp escalation in attacks that use malicious calendar invites to reach targets, email security providers Check Point and Sublime Security have warned. Sublime recorded a 1,216% month-over-month increase in August 2026, and the first […]

Quarantined, but still on your calendar: The explosion of invite-based attacks Read More »

Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks

AI, Check Point, cybersecurity, News, phishing, report, scams, social media /

Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks 2026-10-19 at 12:38 By Anamarija Pogorelec Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 […]

Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks Read More »

Hackers disguise phishing as promising business opportunities

cybercrime, Fortra, News, phishing /

Hackers disguise phishing as promising business opportunities 2026-10-16 at 15:45 By Sinisa Markovic Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind of request sales and procurement staff answer every week. Cadence Riddle, a cybersecurity researcher at Fortra, tracked a 12-fold increase […]

Hackers disguise phishing as promising business opportunities Read More »

Fake CAPTCHAs are tricking users into running malware on their own devices

Barracuda Networks, credentials, Malware, News, phishing /

Fake CAPTCHAs are tricking users into running malware on their own devices 2026-10-15 at 16:29 By Anamarija Pogorelec Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are tricked […]

Fake CAPTCHAs are tricking users into running malware on their own devices Read More »

Microsoft disrupts phishing network behind more than a billion scam messages

Cloud, cybercrime, cybercriminals, Email, Government, healthcare, Microsoft, News, phishing /

Microsoft disrupts phishing network behind more than a billion scam messages 2026-10-15 at 13:10 By Anamarija Pogorelec Microsoft uncovered a criminal marketplace supplying tools and accounts used in phishing scams worldwide. Attackers used these resources to target organizations in healthcare, financial services, wholesale distribution, and IT across Japan, the United States, Australia, and India. Phishing […]

Microsoft disrupts phishing network behind more than a billion scam messages Read More »

The GhostX Ecosystem: Forged in Transit, Licensed to Deceive

cyber news, fake app, infostealer, phishing /

The GhostX Ecosystem: Forged in Transit, Licensed to Deceive 2026-10-15 at 11:44 By rohansinhacyblecom Executive Summary Cyble has continued tracking GhostBat RAT activity targeting Android users in India since its initial identification in October 2025. Recent investigations into malicious mParivahan and eChallan-themed applications revealed a broader operator-controlled ecosystem that we track as GhostX. Analysis of […]

The GhostX Ecosystem: Forged in Transit, Licensed to Deceive Read More »

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

China, cybercrime, disruption, Featured, Microsoft, phishing, takedown, Tracking & Law Enforcement, YAM Store /

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages 2026-10-14 at 16:00 By Eduard Kovacs Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages Read More »

Fake brand discounts on social media prey on shoppers’ fear of missing out

cybercrime, Group-IB, News, phishing, scams, social media /

Fake brand discounts on social media prey on shoppers’ fear of missing out 2026-10-05 at 16:55 By Sinisa Markovic Cybercriminals are using fake discounts posted on Facebook and TikTok to lure shoppers to phishing sites that steal their payment card details and one-time passwords, Group-IB has warned. The phishing kit called Milk Dragon (also known […]

Fake brand discounts on social media prey on shoppers’ fear of missing out Read More »

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts

AI, China, cyber espionage, Government, News, phishing, Proofpoint, USA /

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts 2026-10-02 at 13:21 By Sinisa Markovic A China-aligned espionage group has been posing as a former White House official and a prominent economist to get into the cloud accounts of AI policy experts in the US, Proofpoint have found. The group, which the […]

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts Read More »

Former US Air Force members behind million-dollar BEC scheme head to prison

BEC scams, cybercrime, FBI, law enforcement, News, phishing, US DoJ, USA /

Former US Air Force members behind million-dollar BEC scheme head to prison 2026-09-30 at 10:42 By Sinisa Markovic Two men who ran BEC and phishing campaigns against US businesses while serving in the Air Force have been sentenced to a combined 189 months in federal prison. According to public documents and evidence presented at sentencing, […]

Former US Air Force members behind million-dollar BEC scheme head to prison Read More »

Europe’s technology backbone is becoming a cyber target

cybersecurity, DDoS, ENISA, EU, Europe, News, phishing, Ransomware, social engineering, supply chain /

Europe’s technology backbone is becoming a cyber target 2026-09-24 at 07:00 By Anamarija Pogorelec Disruptive attacks on public-facing services, financially motivated cybercrime and compromises of shared technology providers are increasing cybersecurity risks across Europe. ENISA’s Threat Landscape 2026 identifies cybercrime, state-linked activity, foreign information manipulation and interference, hacktivism and vulnerability exploitation as key threats. Geopolitical […]

Europe’s technology backbone is becoming a cyber target Read More »

DarkMe RAT trades zero-days for plain phishing emails

Don't miss, enterprise, Huntress, News, phishing, Remote Access Trojan, social engineering /

DarkMe RAT trades zero-days for plain phishing emails 2026-09-23 at 16:24 By Zeljka Zorz DarkMe, a remote access trojan and info-stealer that has previously been associated with a threat group that targeted financial market traders and cryptocurrency users, has been spotted again. This time around, its distribution has been simplified: instead of leveraging zero-day exploits, […]

DarkMe RAT trades zero-days for plain phishing emails Read More »

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

cybercrime, EvilTokens, Microsoft, phishing, takedown /

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft 2026-09-23 at 14:23 By Eduard Kovacs The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft Read More »

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes

Cloudflare, Coinbase, cybercrime, Don't miss, Hot stuff, law enforcement, Microsoft, Microsoft 365, News, OpenAI, phishing, Shadowserver, SpyCloud /

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes 2026-09-23 at 11:34 By Sinisa Markovic The EvilTokens phishing service, which compromised more than 12,000 inboxes at over 10,000 organizations, has been disrupted by a coalition of law enforcement and private-sector partners led by Microsoft. With authorization from the US District Court for […]

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes Read More »

A fake ChatGPT billing email is after your OpenAI password

ChatGPT, Cofense, cybercrime, News, OpenAI, phishing, scams /

A fake ChatGPT billing email is after your OpenAI password 2026-09-17 at 16:01 By Anamarija Pogorelec A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of Cofense’s Phishing Defense Center traced the email’s payment button through a Google […]

A fake ChatGPT billing email is after your OpenAI password Read More »

Phishing Research Challenges Conventional Security Awareness Testing

awareness training, phishing /

Phishing Research Challenges Conventional Security Awareness Testing 2026-09-11 at 20:23 By Kevin Townsend Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks. The post Phishing Research Challenges Conventional Security Awareness Testing appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Phishing Research Challenges Conventional Security Awareness Testing Read More »

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack

Brevo, Cryptocurrency, data breach, Data Breaches, email security, phishing, Trezor /

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack 2026-09-11 at 15:48 By Eduard Kovacs Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking. The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek. This article […]

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack Read More »

Attackers call employees’ personal phones to break into Microsoft 365 accounts

Cloud, cybercrime, Microsoft, News, phishing, social engineering /

Attackers call employees’ personal phones to break into Microsoft 365 accounts 2026-09-10 at 16:26 By Sinisa Markovic Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts. Once inside, they pull files and email […]

Attackers call employees’ personal phones to break into Microsoft 365 accounts Read More »

Scroll to Top