Do Son Researchers uncover a novel AiTM campaign targeting TikTok for Business. Attackers bypass MFA to steal Google SSO tokens and hijack corporate ad accounts.
Cloudflare Turnstile
Elastic Security Labs uncovers SILENTCONNECT, a stealthy loader using Cloudflare and Google Drive to deliver RMM tools for "hands-on keyboard" attacks.
ChatGPT agents are now capable of bypassing Cloudflare Turnstile CAPTCHA verification, automatically clicking checkboxes and demonstrating a new level of AI-driven anti-bot system evasion.
A phishing campaign impersonates HunCERT & WeTransfer, using LogoKit on AWS S3 with Cloudflare Turnstile to steal credentials. The active domain has zero VirusTotal detections.
Uncover the latest variant of ClearFake malware, EtherHiding, exploiting Web3 features for advanced malicious tactics.
Stay informed about the latest phishing threat, WikiKit. Learn how its innovative techniques and clever fallback mechanism are targeting industries across automotive, manufacturing, medical, and more.