Do Son Beware of generic phishing pages that adapt to target victims. Learn how these pages impersonate brands and trick users into surrendering sensitive credentials.
Cyber Security
Learn about Lazarus Group's latest attack targeting cryptocurrency professionals. Discover how they weaponized a legitimate open-source project to steal sensitive information.
The U.S. Department of Justice announces indictment of individuals involved in a laptop farm scheme aimed at tricking U.S. businesses and evading sanctions.
Discover the latest trends in credential harvesting and how attackers are targeting a wider range of cloud applications beyond well-known platforms.
Stay informed about the latest payment fraud trends and threats. Learn about the increase in Magecart e-skimmer infections and check fraud in our comprehensive report.
Sophos X-Ops uncovers ransomware campaigns STAC5143 and STAC5777 targeting Microsoft Office 365 and Teams. Learn how these campaigns exploit email bombing and vishing techniques.
Uncover the malicious ApateWeb operation using Blogspot redirectors to distribute phishing pages and malware.
Uncover the Bruteforce Campaign targeting Azure Active Directory. Learn how attackers are leveraging the fasthttp library for unauthorized access.
Discover the emergence of GamaCopy, a cyber espionage group mimicking Gamaredon APT and targeting Russian defense and critical infrastructure sectors.
Learn about the sophisticated cyber-espionage tactics of the New OceanLotus group. Discover how they target critical sectors with advanced techniques and leverage zero-day vulnerabilities.
Beware of cybercriminals using AnyDesk for malicious activities. Learn how these attackers exploit trust in CERT-UA for unauthorized access and data breaches.
Learn about a record-breaking DDoS attack that targeted an internet service provider in East Asia. Discover how Cloudflare's advanced defense system neutralized the threat.
Beware of Zendesk phishing campaigns using custom subdomains. Learn how threat actors are leveraging the platform's free trial to deceive unsuspecting users.
Beware of LinkedIn as an initial infection vector for cybercriminals. Learn about Lazarus Group's Operation Dream Job and how they exploit legitimate accounts.
Learn about the ongoing cyber campaign targeting German organizations. Explore the advanced tactics, including DLL proxying, used by the attackers.
Unveiling the exploitation of Meta's advertising infrastructure by a sanctioned Russian IT firm. Learn about the Doppelgänger operation and its tactics to manipulate public opinion.
Uncover the operations and tactics of IntelBroker, a notorious figure in the cybercrime world, known for high-profile data breaches and ransomware attacks.
Learn about the cyber espionage campaign targeting U.S. government systems and critical infrastructure. Sanctions imposed on Chinese entities.
Discover the ValleyRAT malware and how the Silver Fox APT group utilizes the PNGPlug loader to execute their cyber-espionage attacks.
Uncover the latest spear-phishing campaign by the Russian threat actor Star Blizzard targeting WhatsApp accounts.
Discover the Sneaky 2FA phishing kit, a sophisticated tool that bypasses MFA to exploit Microsoft 365 accounts. Stay informed about the latest threats.
NVISO Labs uncovers a new phishing campaign by Black Basta. See how they employ Microsoft Teams as a tool for social engineering attacks.