-
Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors are increasingly bypassing conventional malware detection by abusing legitimate remote monitoring and management software instead of deploying custom implants. In a recent phishing operation, attackers delivered a genuine, digitally signe…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A phishing-as-a-service operation dubbed Milk Dragon, also known as NaiLong, is abusing discount-themed Facebook and TikTok posts to steal payment-card data and intercept multi-factor authentication (MFA) challenges. Group-IB identified 258 phishing pa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A China-linked threat actor known as TA419 has targeted U.S. artificial intelligence policy specialists through highly customized credential-phishing operations. This campaign, which involves impersonation, adversary-in-the-middle infrastructure, and a…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Students, job seekers and university staff, watch out for fake job offers sent from legitimate university email accounts.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An internet-exposed cybercrime server linked to the BlackHatSect0r and DXQRTXX personas, revealing an operational environment that allegedly combined AI-assisted automation. Custom command-and-control tooling, phishing resources, stolen credentials, ta…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
MSSP Tier 1 analysts can cut phishing triage time with interactive analysis, fresh threat intelligence, clearer evidence and complete Tier 2 handoffs worldwide.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft disrupted EvilTokens after the AI-powered phishing service compromised 12,000 inboxes across 10,000 organisations and enabled complex financial fraud.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
