Cybersecurity News

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

More than 140,000 phishing websites have been found linked to a phishing-as-a-service (PhaaS) platform named Sniper Dz over the past year, indicating that it's…

Palo Alto

How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back

Attackers are increasingly using new phishing toolkits (open-source, commercial, and criminal) to execute adversary-in-the-middle (AitM) attacks.AitM enables a…

Hackers Use ZeroFont Phishing To Target Microsoft Outlook Users

In a recent phishing campaign, the researchers noticed the use of the long-known ZeroFont phishing…Hackers Use ZeroFont Phishing To Target Microsoft Outlook Us…

Microsoft 365

Hackers Now Use CAPTCHAs To Bypass Filters For Successful Phishing Attacks

Researchers have found a new phishing campaign that exploits CAPTCHAs to execute phishing attacks while…Hackers Now Use CAPTCHAs To Bypass Filters For Successf…

New Phishing Campaign Exploits Proofpoint's Name To Steal Credentials

Phishing attacks keep surfacing online with innovative ways to trick users. The latest phishing campaign…New Phishing Campaign Exploits Proofpoint's Name To St…

MSOffice 365 Phishing Campaign Uses CAPTCHAs To Evade Security Checks

One more phishing campaign is in the wild targeting users with evasive techniques. As observed, the new phishing campaign aimingMSOffice 365 Phishing Campaign …

Microsoft 365

New Phishing Campaign Evades Security Checks With Hexadecimal IP Addresses

A new phishing campaign has emerged. As observed, this phishing campaign makes use of hexadecimal IP addresses instead of theNew Phishing Campaign Evades Secur…

New Phishing Campaign Delivers NetSupport Manager RAT Via MS Word

Researchers have discovered a new phishing campaign in the wild that targets users with a RAT. Briefly, this phishing campaignNew Phishing Campaign Delivers Ne…

Why Minimizing Human Error is the Only Viable Defense Against Spear Phishing

Phishing attacks have become one of the business world's top cybersecurity concerns. These social engineering attacks have been rising over the years, with the…

Emotet Malware Targeted United Nations Via Phishing Attack

As reported, a phishing attack targeted United Nations with Emotet malware. The dedicated email phishing campaign targeted 600 UN emailEmotet Malware Targeted …

Device Code Phishing Is How Midnight Blizzard Beat MFA on Hotel Wi-Fi

A Storm-2945 campaign layers device code phishing onto hijacked hotel Wi-Fi to bypass MFA on Microsoft 365 accounts. Here's how it works and how to shut it off…

Microsoft 365

Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware

North Korean threat actors have been observed sending phishing to compromise targets and obtain access to a victim's KakaoTalk desktop application to distribut…

From MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks

Cybersecurity researchers have disclosed details of a phishing campaign that delivers a stealthy banking malware-turned-remote access trojan called MostereRAT.…

Fortinet

Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

The threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated delivery mechanisms to deploy the information stealer in atta…

New Phishing Campaign Exploits Google Calendar To Evade Filters

Researchers have observed an ongoing phishing attack that exploits Google Calendar to evade security filters.…New Phishing Campaign Exploits Google Calendar To…

CERT-UA Warns of Phishing Attacks Targeting Ukraine’s Defense and Security Force

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new set of cyber attacks that it said were aimed at defense companies in the country …

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

A new spear-phishing campaign targeting Brazil has been found delivering a banking malware called Astaroth (aka Guildma) by making use of obfuscated JavaScript…

ANY.RUN Discovers Tricky Phishing Attack Using Fake CAPTCHA

Phishing campaigns relentlessly continue to evolve, utilizing innovative tricks to deceive users. ANY.RUN, the interactive…ANY.RUN Discovers Tricky Phishing At…

This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

A Spanish-speaking cybercrime group named GXC Team has been observed bundling phishing kits with malicious Android applications, taking malware-as-a-service (M…

Android

Emojis as Weapons: Dissecting DISGOMOJI's Malware Assault on Government Security

DISGOMOJI malware represents an innovative development in cyber espionage tactics, particularly its refined approach to targeting government agencies in India.…

Linux

New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malware

An updated version of an information-stealing malware called Rhadamanthys is being used in phishing campaigns targeting the oil and gas sector."The phishing em…

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

A new phishing campaign has been observed leveraging a novel loader malware to deliver an information stealer and keylogger called Agent Tesla.Trustwave Spider…

Cybercriminals Using Telekopye Telegram Bot to Craft Phishing Scams on a Grand Scale

More details have emerged about a malicious Telegram bot called Telekopye that's used by threat actors to pull off large-scale phishing scams."Telekopye can cr…

EvilProxy Phishing Targets Microsoft 365 Accounts Via Indeed.com Redirects

Researchers have found a new EvilProxy phishing campaign that targets Microsoft 365 accounts. To trick…EvilProxy Phishing Targets Microsoft 365 Accounts Via In…

Microsoft 365