Do Son A new phishing campaign delivers FormBook malware via Word docs, exploiting CVE-2017-11882. The fileless attack uses process hollowing to evade detection.
phishing
A deep dive into a sophisticated multi-stage malware attack using Cloudflare to deliver AsyncRAT. Learn how attackers evade detection and compromise systems.
A sophisticated DKIM Replay Attack spoofed Google, bypassing email security. Learn how this attack worked and how to protect yourself from email spoofing.
Unit 42 uncovers a sophisticated phishing campaign using multi-layered tactics to deliver malware like Agent Tesla, evading detection.
Hunt.io reveals a server-side phishing campaign that evades detection to steal employee credentials, bypassing 2FA.
CISA warns of potential risks from Oracle cloud credential exposure. Urges password resets, MFA, and vigilance against phishing attacks.
Malvertising campaign targets Onfido users via deceptive Google ads, using Evilginx to steal credentials.
New attack campaign uses Microsoft Teams phishing and a novel TypeLib COM hijacking technique for persistence, targeting finance sector.
APT29, a Russia-linked group, targets European diplomats with phishing emails disguised as wine tasting invitations, deploying GRAPELOADER malware
A widespread smishing campaign targeting toll road users across multiple U.S. states is stealing payment credentials. Learn how scammers are impersonating E-ZPass and other toll systems to trick victims
TROX Stealer exploits urgency via phishing emails to deliver obfuscated MaaS malware that steals credit cards, browser data, and crypto wallets
Learn about Precision-Validated Phishing, a sophisticated technique where attackers use real-time email validation to target specific users, making credential theft more effective and harder to detect.
The SideCopy APT group is evolving its tactics, using new methods like MSI packages and custom malware to target critical Indian sectors, including railways and oil & gas
A Silent Push report details the evolving tactics of the Scattered Spider hacker collective, including new phishing kits, the Spectre RAT, and targeting of major brands in 2025.
A new "Pick Your Poison" phishing campaign tricks users into choosing between having their credentials stolen or infecting their systems with malware. Cofense analysis reveals how this double-edged attack uses files.fm to deliver malicious payloads.
A Trend Micro report explores the evolving tactics of the Russian-speaking cybercriminal underground, including phishing innovations, Web3 scams, the role of ransomware, and the convergence of cyber and physical crime
The Grandoreiro banking trojan is being spread through phishing campaigns. Learn about the attack methods and how to stay safe.
Explore how AWS SNS is abused by threat actors for data exfiltration and phishing. Learn about detection opportunities.
Explore the risks of Device Code Authentication phishing targeted at Microsoft 365 users by Russian threat actors.
Stay vigilant against PayPal phishing attacks. Learn about a sophisticated phishing tactic that tricks even the most cautious users.
Discover the alarming rise of cyber threats in Hong Kong. Find out about the most common types of attacks and how to safeguard your online security.
The team has observed a surge in malicious PDF files distributed via email, which contain embedded QR codes