phishing

Security Firm Executive Targeted in Sophisticated Phishing Attack

phishing /

Security Firm Executive Targeted in Sophisticated Phishing Attack 2026-03-16 at 16:43 By Ionut Arghire The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages. The post Security Firm Executive Targeted in Sophisticated Phishing Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Security Firm Executive Targeted in Sophisticated Phishing Attack Read More »

AI-Assisted Phishing Campaign Exploits Browser Permissions to Capture Victim Data

AI, Credential Harvesting, infostealer, phishing, social engineering /

AI-Assisted Phishing Campaign Exploits Browser Permissions to Capture Victim Data 2026-03-16 at 08:24 By rohansinhacyblecom Executive Summary Cyble Research & Intelligence Labs (CRIL) has identified a widespread, highly active social engineering campaign hosted primarily on edgeone.app infrastructure. The initial access vectors are diverse — ranging from “ID Scanner,” and “Telegram ID Freezing,” to “Health Fund

AI-Assisted Phishing Campaign Exploits Browser Permissions to Capture Victim Data Read More »

HR, recruiters targeted in year-long malware campaign

Aryaka, Don't miss, Hot stuff, Human Resources, Malware, News, phishing, social engineering /

HR, recruiters targeted in year-long malware campaign 2026-03-10 at 15:39 By Zeljka Zorz An attack campaign targeting HR departments and job recruiters has been stealthily compromising systems, Aryaka researchers have discovered. By avoiding analysis environments and leveraging a specialized module designed to kill antivirus and endpoint detection software, the Russian-speaking attacker(s) behind this campaign have

HR, recruiters targeted in year-long malware campaign Read More »

Phishing campaign spoofs local officials to steal permit fees

cybercrime, FBI, Government, News, phishing, scams, USA /

Phishing campaign spoofs local officials to steal permit fees 2026-03-10 at 13:01 By Sinisa Markovic The FBI is warning about a phishing scheme in which cybercriminals impersonate city and county officials to solicit fraudulent payments for planning and zoning permits. Criminals mine publicly available permit data to find likely targets and make their outreach appear

Phishing campaign spoofs local officials to steal permit fees Read More »

Russian hackers crack into officials’ Signal and WhatsApp accounts

cyberattack, EU, government-backed attacks, News, phishing, Russian Federation, Signal, WhatsApp /

Russian hackers crack into officials’ Signal and WhatsApp accounts 2026-03-09 at 17:02 By Sinisa Markovic Russian state hackers are trying to break into Signal and WhatsApp accounts used by diplomats, military staff, and government officials worldwide, Dutch intelligence agencies warned. They believe journalists and other people who attract attention from Moscow may also be affected.

Russian hackers crack into officials’ Signal and WhatsApp accounts Read More »

Internet Infrastructure TLD .arpa Abused in Phishing Attacks

arpa, DNS, phishing /

Internet Infrastructure TLD .arpa Abused in Phishing Attacks 2026-03-09 at 15:37 By Ionut Arghire Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare. The post Internet Infrastructure TLD .arpa Abused in Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Internet Infrastructure TLD .arpa Abused in Phishing Attacks Read More »

Why phishing still works today

attacks, cybersecurity, Don't miss, News, opinion, phishing, Terra Security, tips, Video /

Why phishing still works today 2026-03-06 at 08:30 By Help Net Security In this Help Net Security video, Gal Livschitz, Senior Penetration Tester at Terra Security, explains how phishing has evolved and why employees still fall for it. He outlines how phishing now uses HTTPS, branded pages, and lookalike domains, making attacks harder to spot.

Why phishing still works today Read More »

Authorities pull plug on Tycoon 2FA phishing-as-a-service platform

cybercrime, Europol, law enforcement, Microsoft, News, phishing /

Authorities pull plug on Tycoon 2FA phishing-as-a-service platform 2026-03-05 at 10:51 By Sinisa Markovic Tycoon 2FA, a phishing-as-a-service platform that allowed cybercriminals to bypass MFA and break into online accounts, has been disrupted by law enforcement agencies and cybersecurity partners. Takedown of the Tycoon 2FA phishing-as-a-service platform (Source: Europol) Active since August 2023, Tycoon 2FA

Authorities pull plug on Tycoon 2FA phishing-as-a-service platform Read More »

Threat actors weaponize OAuth redirection logic to deliver malware

Don't miss, Government, Hot stuff, Malware, Microsoft, News, OAuth, phishing, public sector, social engineering /

Threat actors weaponize OAuth redirection logic to deliver malware 2026-03-03 at 19:46 By Zeljka Zorz An ongoing phishing campaign is abusing the OAuth authentication redirection mechanism to avoid triggering conventional email and browser defenses, Microsoft researchers have revealed. The attackers are targeting government and public-sector organizations, and redirecting unsuspecting users from trusted login pages to

Threat actors weaponize OAuth redirection logic to deliver malware Read More »

Ransomware activity peaks outside business hours

Artificial Intelligence, cybersecurity, generative AI, identity, News, phishing, report, Sophos /

Ransomware activity peaks outside business hours 2026-02-27 at 12:18 By Anamarija Pogorelec Intrusions continue to center on credential access and timed execution outside standard business hours. The Sophos Active Adversary Report 2026 analyzes 661 incident response and managed detection and response cases handled between November 1, 2024 and October 31, 2025, spanning organizations in 70

Ransomware activity peaks outside business hours Read More »

Airline brands become launchpads for phishing, crypto fraud

attacks, BforeAI, Crypto, cybercrime, cybersecurity, Don't miss, News, phishing, scams, Threat Intelligence, threats, travel industry /

Airline brands become launchpads for phishing, crypto fraud 2026-02-25 at 08:05 By Sinisa Markovic Airline brands sit at the center of peak travel booking cycles, loyalty programs, and high value transactions. Criminal groups continue to register thousands of lookalike domains tied to these brands, targeting travelers, employees, and business partners. Recent threat intelligence from BforeAI’s

Airline brands become launchpads for phishing, crypto fraud Read More »

State-backed phishing attacks targeting military officials and journalists on Signal

cyber espionage, Don't miss, Europe, Germany, government-backed attacks, Hot stuff, News, phishing, Signal /

State-backed phishing attacks targeting military officials and journalists on Signal 2026-02-06 at 16:53 By Zeljka Zorz German security authorities are warning that a likely state-backed hacking group is engaged in attempts at phishing senior political figures, military officials, diplomats, and investigative journalists across Germany and Europe via Signal. The authorities also noted that while these

State-backed phishing attacks targeting military officials and journalists on Signal Read More »

AI is driving a new kind of phishing at scale

attacks, Cofense, cybercrime, cybersecurity, email security, enterprise, News, phishing, report, survey, threats /

AI is driving a new kind of phishing at scale 2026-02-05 at 09:11 By Sinisa Markovic Email remains a primary entry point for attackers, and security teams continue to manage high volumes of malicious messages that change form across campaigns. Attackers generate large numbers of messages with small variations in wording, structure, and delivery paths.

AI is driving a new kind of phishing at scale Read More »

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign

cybercrime, data breach, phishing, ShinyHunters, vishing /

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign 2026-01-27 at 17:17 By Eduard Kovacs Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork. The post Over 100 Organizations Targeted in ShinyHunters Phishing Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign Read More »

‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing

Malware, Malware & Threats, phishing, spoofing, Stanley /

‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing 2026-01-26 at 14:37 By Ionut Arghire Priced $2,000 – $6,000 on a cybercrime forum, the MaaS toolkit promises publication on the Chrome Web Store. The post ‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing Read More »

1Password targets AI-driven phishing with built-in prevention

1Password, News, phishing /

1Password targets AI-driven phishing with built-in prevention 2026-01-23 at 15:31 By Anamarija Pogorelec To help reduce phishing risk, 1Password added an extra layer of protection and began rolling out a phishing prevention feature designed to stop users before they share passwords with scammers. How 1Password phishing prevention works When a user clicks a link whose

1Password targets AI-driven phishing with built-in prevention Read More »

Phishers Abuse SharePoint in New Campaign Targeting Energy Sector

energy, Microsoft, phishing /

Phishers Abuse SharePoint in New Campaign Targeting Energy Sector 2026-01-23 at 15:31 By Ionut Arghire Threat actors are leveraging the file-sharing service for payload delivery in AitM phishing and BEC attacks. The post Phishers Abuse SharePoint in New Campaign Targeting Energy Sector appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Phishers Abuse SharePoint in New Campaign Targeting Energy Sector Read More »

Scroll to Top