The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services."At…
A Russia-linked threat actor has been linked to a new campaign that employed a car for sale as a phishing lure to deliver a modular Windows backdoor called Hea…
Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell scri…
A Latin America (LATAM)-based financially motivated actor codenamed FLUXROOT has been observed leveraging Google Cloud serverless projects to orchestrate crede…
Remember when you were sent an email from a purported "bank" informing you of suspicious transactions? Phishing attacks - those deceptive attempts at stealing …
Cybersecurity researchers have spotted a phishing attack distributing the More_eggs malware by masquerading it as a resume, a technique originally detected mor…
Cybersecurity researchers have observed a spike in email phishing campaigns starting early March 2024 that delivers Latrodectus, a nascent malware loader belie…
A threat actor tracked as TA547 has targeted dozens of German organizations with an information stealer called Rhadamanthys as part of an invoice-themed phishi…
Cybersecurity researchers have discovered an intricate multi-stage attack that leverages invoice-themed phishing decoys to deliver a wide range of malware such…
A new phishing campaign is targeting U.S. organizations with the intent to deploy a remote access trojan called NetSupport RAT.Israeli cybersecurity company Pe…
Mexican users have been targeted with tax-themed phishing lures at least since November 2023 to distribute a previously undocumented Windows malware called Tim…
Cybersecurity researchers are calling attention to the "democratization" of the phishing ecosystem owing to the emergence of Telegram as an epicenter for cyber…
The threat actor tracked as TA866 has resurfaced after a nine-month hiatus with a new large-volume phishing campaign to deliver known malware families such as …
The threat actor referred to as Cloud Atlas has been linked to a set of spear-phishing attacks on Russian enterprises.Targets included a Russian agro-industria…
Phishing campaigns delivering malware families such as DarkGate and PikaBot are following the same tactics previously used in attacks leveraging the now-defunc…
The Iranian nation-state actor known asMuddyWaterhas been linked to a new spear-phishing campaign targeting two Israeli entities to ultimately deploy a legitim…
The threat actors behind RedLine and Vidar information stealers have been observed pivoting to ransomware through phishing campaigns that spread initial payloa…
A new phishing attack likely targeting civil society groups in South Korea has led to the discovery of a novel remote access trojan calledSuperBear.The intrusi…
A new financially motivated operation is leveraging a malicious Telegram bot to help threat actors scam their victims.DubbedTelekopye, a portmanteau of Telegra…
[TEL AVIV, Israel, June 8, 2023] – Guardz, the cybersecurity company securing and insuring SMEs,…Guardz Launches AI-Powered Multilayered Phishing Protection To…
Researchers observed malicious use of a self-claimed educational tool, “Evil Extractor,” for stealing data. They…Evil Extractor Infostealer Targets Windows In …
Researchers have identified that a massive 144,294 phishing-related packages have been uploaded by unknown threat actors on widely used open-source package rep…
Researchers have found a new malware, “Ducktail,” that attempts to hack Facebook Business accounts via…Ducktail Malware Targets Facebook Business Accounts Via …
Heads up, Facebook users! Cybercriminals have come up with an innovative strategy to hack Facebook…This Phishing Campaign Used Malicious Chatbots To Steal Face…