Do Son JUMPSEC analyzed the BlueNoroff phishing kit's source code. The DPRK ClickFix attack fakes Zoom and Teams calls to profile and drain crypto wallets.
Phishing Kit
A vishing attack tricks Microsoft 365 users into passkey phishing, letting O-UNC-066 enroll its own passkey and hijack Entra accounts for extortion.
Read the Group-IB phishing report detailing the massive Smishing Error524 campaign targeting millions across 72 countries with advanced evasion tactics.
Iranian APT "Educated Manticore" (APT42) uses AI-assisted spear-phishing via email/WhatsApp to target critics with React-based phishing kits, bypassing MFA and stealing credentials.
The CoGUI phishing kit uses advanced evasion to target Japan with high-volume campaigns impersonating Amazon, PayPay, and more.
Silent Push reveals Smishing Triad's widespread SMS phishing campaigns targeting 121+ countries. The group uses sophisticated kits to steal credentials and financial data.
Uncover the dangers of the Astaroth Phishing Kit, which bypasses two-factor authentication to steal sensitive credentials.
Uncover the details of Xiū Gǒu, a new phishing kit targeting organizations in the public sector, postal, digital services, and banking sectors.