Phishing
The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages.
Hi, what are you looking for?
SecurityWeek
All posts tagged "phishing"
Phishing
The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses.
Phishing
Victims span across the aviation, critical infrastructure, energy, logistics, public administration, and technology sectors.
Phishing
The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.
Phishing
Still under development, Bluekit provides users with automated domain registration and an AI Assistant.
Phishing
Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites.
Email Security
New analysis from Abnormal AI reveals how attackers have abandoned technical exploits to weaponize routine workflows and internal trust.
Phishing
Threat actors are reusing Tycoon 2FA tools across other phishing kits following the platform’s disruption.
Phishing
Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged.
Phishing
The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages, but the attack was unsuccessful.
Data Breaches
Starbucks said the incident involved phishing attacks targeting an employee portal, affecting hundreds.
Phishing
Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare.
Phishing
The attackers are sending out fake alerts claiming unauthorized access or master password changes.
Cybercrime
Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork.
Malware & Threats
Priced $2,000 - $6,000 on a cybercrime forum, the MaaS toolkit promises publication on the Chrome Web Store.
Phishing
Threat actors are leveraging the file-sharing service for payload delivery in AitM phishing and BEC attacks.
Cybercrime
Threat actors may have wanted to take advantage of the holiday weekend in the United States to increase their chances of success.
Email Security
Threat actors spoof legitimate domains to make their phishing emails appear to have been sent internally.
Cybercrime
The cybercriminals attempted to steal $28 million from compromised bank accounts through phishing.
Identity & Access
AI has given cybercriminals the ability to operate like Fortune‑500‑scale marketing departments—except their product is account takeover, data theft, and identity fraud.
Malware & Threats
Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out.
Artificial Intelligence
Artificial Intelligence
Identity & Access
Vulnerabilities
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
