Cybercrime
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Hi, what are you looking for?
SecurityWeek
All posts tagged "phishing"
Cybercrime
The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.
Phishing
Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks.
Data Breaches
Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.
Phishing
Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no static website to detect or...
Cybercrime
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Mobile & Wireless
Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations.
Phishing
The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages.
Phishing
The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses.
Phishing
Victims span across the aviation, critical infrastructure, energy, logistics, public administration, and technology sectors.
Phishing
The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.
Phishing
Still under development, Bluekit provides users with automated domain registration and an AI Assistant.
Phishing
Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites.
Email Security
New analysis from Abnormal AI reveals how attackers have abandoned technical exploits to weaponize routine workflows and internal trust.
Phishing
Threat actors are reusing Tycoon 2FA tools across other phishing kits following the platform’s disruption.
Phishing
Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged.
Phishing
The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages, but the attack was unsuccessful.
Data Breaches
Starbucks said the incident involved phishing attacks targeting an employee portal, affecting hundreds.
Phishing
Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare.
Phishing
The attackers are sending out fake alerts claiming unauthorized access or master password changes.
Cybercrime
A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities.
Malware & Threats
Vulnerabilities
Artificial Intelligence
The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.
Malware & Threats
Artificial Intelligence
Identity & Access
