phishing

Fake brand discounts on social media prey on shoppers’ fear of missing out

cybercrime, Group-IB, News, phishing, scams, social media /

Fake brand discounts on social media prey on shoppers’ fear of missing out 2026-10-05 at 16:55 By Sinisa Markovic Cybercriminals are using fake discounts posted on Facebook and TikTok to lure shoppers to phishing sites that steal their payment card details and one-time passwords, Group-IB has warned. The phishing kit called Milk Dragon (also known […]

Fake brand discounts on social media prey on shoppers’ fear of missing out Read More »

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts

AI, China, cyber espionage, Government, News, phishing, Proofpoint, USA /

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts 2026-10-02 at 13:21 By Sinisa Markovic A China-aligned espionage group has been posing as a former White House official and a prominent economist to get into the cloud accounts of AI policy experts in the US, Proofpoint have found. The group, which the […]

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts Read More »

Former US Air Force members behind million-dollar BEC scheme head to prison

BEC scams, cybercrime, FBI, law enforcement, News, phishing, US DoJ, USA /

Former US Air Force members behind million-dollar BEC scheme head to prison 2026-09-30 at 10:42 By Sinisa Markovic Two men who ran BEC and phishing campaigns against US businesses while serving in the Air Force have been sentenced to a combined 189 months in federal prison. According to public documents and evidence presented at sentencing, […]

Former US Air Force members behind million-dollar BEC scheme head to prison Read More »

Europe’s technology backbone is becoming a cyber target

cybersecurity, DDoS, ENISA, EU, Europe, News, phishing, Ransomware, social engineering, supply chain /

Europe’s technology backbone is becoming a cyber target 2026-09-24 at 07:00 By Anamarija Pogorelec Disruptive attacks on public-facing services, financially motivated cybercrime and compromises of shared technology providers are increasing cybersecurity risks across Europe. ENISA’s Threat Landscape 2026 identifies cybercrime, state-linked activity, foreign information manipulation and interference, hacktivism and vulnerability exploitation as key threats. Geopolitical […]

Europe’s technology backbone is becoming a cyber target Read More »

DarkMe RAT trades zero-days for plain phishing emails

Don't miss, enterprise, Huntress, News, phishing, Remote Access Trojan, social engineering /

DarkMe RAT trades zero-days for plain phishing emails 2026-09-23 at 16:24 By Zeljka Zorz DarkMe, a remote access trojan and info-stealer that has previously been associated with a threat group that targeted financial market traders and cryptocurrency users, has been spotted again. This time around, its distribution has been simplified: instead of leveraging zero-day exploits, […]

DarkMe RAT trades zero-days for plain phishing emails Read More »

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

cybercrime, EvilTokens, Microsoft, phishing, takedown /

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft 2026-09-23 at 14:23 By Eduard Kovacs The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft Read More »

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes

Cloudflare, Coinbase, cybercrime, Don't miss, Hot stuff, law enforcement, Microsoft, Microsoft 365, News, OpenAI, phishing, Shadowserver, SpyCloud /

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes 2026-09-23 at 11:34 By Sinisa Markovic The EvilTokens phishing service, which compromised more than 12,000 inboxes at over 10,000 organizations, has been disrupted by a coalition of law enforcement and private-sector partners led by Microsoft. With authorization from the US District Court for […]

Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes Read More »

A fake ChatGPT billing email is after your OpenAI password

ChatGPT, Cofense, cybercrime, News, OpenAI, phishing, scams /

A fake ChatGPT billing email is after your OpenAI password 2026-09-17 at 16:01 By Anamarija Pogorelec A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of Cofense’s Phishing Defense Center traced the email’s payment button through a Google […]

A fake ChatGPT billing email is after your OpenAI password Read More »

Phishing Research Challenges Conventional Security Awareness Testing

awareness training, phishing /

Phishing Research Challenges Conventional Security Awareness Testing 2026-09-11 at 20:23 By Kevin Townsend Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks. The post Phishing Research Challenges Conventional Security Awareness Testing appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Phishing Research Challenges Conventional Security Awareness Testing Read More »

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack

Brevo, Cryptocurrency, data breach, Data Breaches, email security, phishing, Trezor /

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack 2026-09-11 at 15:48 By Eduard Kovacs Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking. The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek. This article […]

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack Read More »

Attackers call employees’ personal phones to break into Microsoft 365 accounts

Cloud, cybercrime, Microsoft, News, phishing, social engineering /

Attackers call employees’ personal phones to break into Microsoft 365 accounts 2026-09-10 at 16:26 By Sinisa Markovic Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts. Once inside, they pull files and email […]

Attackers call employees’ personal phones to break into Microsoft 365 accounts Read More »

Cybercriminals are building phishing pages that exist only inside victims’ browsers

Barracuda Networks, cybercrime, Microsoft Teams, News, phishing /

Cybercriminals are building phishing pages that exist only inside victims’ browsers 2026-09-10 at 10:14 By Sinisa Markovic A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a […]

Cybercriminals are building phishing pages that exist only inside victims’ browsers Read More »

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser

Featured, phishing /

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser 2026-09-09 at 13:00 By Kevin Townsend Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no static website to detect or block. The post New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser appeared first […]

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser Read More »

Trezor customers hit with phishing calls and letters after shipping-partner breach

Cryptocurrency, data breach, Don't miss, Hot stuff, News, phishing, QR codes, Trezor /

Trezor customers hit with phishing calls and letters after shipping-partner breach 2026-09-08 at 14:30 By Zeljka Zorz Roughly 67,000 more customers of SatoshiLabs, the maker of hardware crypto-wallet Trezor, are at heightened risk of phishing attacks after their names, email addresses, phone numbers, and shipping addresses were exposed. “The leaked information could be used for […]

Trezor customers hit with phishing calls and letters after shipping-partner breach Read More »

IT help-desk vishing tricks executives into handing over Microsoft 365 access

Arctic Wolf Networks, cybercrime, Microsoft 365, News, phishing /

IT help-desk vishing tricks executives into handing over Microsoft 365 access 2026-09-08 at 14:17 By Sinisa Markovic IT help-desk vishing calls, stolen session tokens, and sign-ins routed through residential proxies are behind a wave of data theft and extortion against Microsoft 365 and other SaaS accounts, according to Arctic Wolf. The company is tracking the […]

IT help-desk vishing tricks executives into handing over Microsoft 365 access Read More »

Microsoft Teams is about to make QR code phishing much harder

cybersecurity, Microsoft Teams, News, phishing, QR codes /

Microsoft Teams is about to make QR code phishing much harder 2026-09-04 at 11:28 By Sinisa Markovic Microsoft is preparing a new feature for Teams users that will help them stay safe from QR code phishing. Teams will automatically hide QR codes sent by people outside the organization. Users will need to reveal the image […]

Microsoft Teams is about to make QR code phishing much harder Read More »

Attackers are going after prominent individuals through OAuth phishing, FBI warns

cybercrime, FBI, News, OAuth, phishing /

Attackers are going after prominent individuals through OAuth phishing, FBI warns 2026-09-02 at 13:58 By Sinisa Markovic Attackers are targeting prominent individuals, their relatives and personal contacts to gain persistent access to their accounts, including private emails and files, the FBI has warned. The FBI’s Internet Crime Complaint Center (IC3) says the activity, which uses […]

Attackers are going after prominent individuals through OAuth phishing, FBI warns Read More »

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

cybercrime, Microsoft Teams, News, Palo Alto Networks, phishing, social engineering /

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks 2026-09-01 at 17:07 By Sinisa Markovic A coordinated voice-phishing (vishing) campaign, named Spring Ring, used fake IT support accounts on Microsoft Teams to trick employees into installing malware or granting remote access to their computers, according to Unit 42, Palo Alto Networks’ […]

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks Read More »

AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes

apple, cybercrime, mobile security, News, phishing, SOCRadar /

AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes 2026-08-26 at 15:46 By Sinisa Markovic A phishing-as-a-service (PhaaS) platform called AnonyMousKIT is automating the theft of Apple ID credentials needed to remove Activation Lock from stolen iPhones, SOCRadar found. “By leveraging a critical flaw – the use of bare relative paths – the investigation […]

AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes Read More »

Bogus recruiters go after high-value corporate credentials on mobile

mobile security, News, phishing, scams, Zimperium /

Bogus recruiters go after high-value corporate credentials on mobile 2026-08-26 at 13:05 By Sinisa Markovic Scammers posing as HR staff at well-known companies are running interview scheduling scams that end with a stolen corporate password, according to Zimperium. Attackers are using a technique called browser-in-the-browser, or BitB, which CTM360 documented in earlier research on recruitment […]

Bogus recruiters go after high-value corporate credentials on mobile Read More »

Scroll to Top