Stories tagged “Phishing.”
30 stories
The domain "third-party.com," widely used as a placeholder in developer documentation, is now being exploited to serve ClickFix attacks that trick Windows users into executing malicious PowerShell commands.
.jpg)
A new Android malware-as-a-service (MaaS) called RemControl is targeting users in Europe, Canada, and the Middle East through malvertising campaigns and fake Google Play pages, stealing banking credentials.
The SideCopy APT group, originating from Pakistan, has expanded its targeting in India from government entities to academic institutions using spear-phishing campaigns that deploy the ReverseRAT malware.
Microsoft has revealed two distinct cyber campaigns: one involving AI-generated financial fraud emails impersonating CEOs for ACH transfers, and another using passkey-themed social engineering to compromise Microsoft cloud accounts and exfiltrate data.
Trezor warns of phishing attacks targeting 347,000 users after a Brevo breach.
A flaw in email platform Brevo's login system allowed an attacker to access 138 client accounts, leading to phishing emails targeting 347,000 Trezor newsletter subscribers, as well as users of BitBox and CoinTracking.
Trezor warns of phishing attacks targeting customers after a data breach at their third-party marketing platform.
Hardware wallet makers Trezor and BitBox warn users about phishing emails disguised as urgent security notices.
Threat hunters disclose a data theft and extortion threat targeting Microsoft 365 and SaaS users through fake IT calls and proxy sign-ins.
Phishing-as-a-service framework BigBear 2.0 bypassed MFA at 258 organizations, stealing over 5,000 Microsoft 365 credentials.
Microsoft discovers a large-scale phishing campaign using invisible Unicode characters to evade email security filters. The method has been used in millions of finance-themed phishing messages.
Microsoft warns of a high-volume phishing campaign using invisible Unicode characters to bypass email filters.
This ThreatsDay report details a range of sophisticated cyberattacks, including CEO phishing kits, large-scale Dropbox account hacks, and OAuth traps, alongside 17 other security incidents.
RMM phishing campaign targeting US, 45% of activity
Cybersecurity researchers have disclosed details of a phishing-as-a-service platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agents that call theft victims posing as Apple Support and ask for their device passcode.
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature. The illegal service has been active since early 2024 and is powering a structured eco…
ReliaQuest confirms a failed data-theft attack after hackers impersonated a member of the security team. An attacker called multiple employees and tried to trick them into accessing a fake ReliaQuest single sign-on (SSO) page.
Malware family SynkLoader being distributed via fake lock screen in Microsoft Teams phishing campaigns to steal credentials.
Phishing attacks have become more sophisticated with the use of AI, making it harder for traditional email filters to detect them. MSPs can protect their clients by monitoring behavior, not just emails, and correlating activity across the environment.
Rapid7 reveals a new cryptocurrency phishing campaign that targeted 885,000 phone numbers to steal investors' assets. The attack involved fake wallet provider websites and social engineering scams.
The CPF Board warned of phishing e-mails falsely claiming refunds of excess CPF contributions, urging the public not to click links or share personal details.
Cryptocurrency hardware wallet provider SafePal disclosed a data breach affecting 39,798 customers after an order-tracking flaw was exploited, with stolen data now being sold on a cybercrime forum.
DefiLlama's founder said Apple removed one fake app within days after the company documented it draining funds from a small crypto wallet. DefiLlama delayed the launch of its mobile app while it spent months trying to get Apple to remove phishing apps from its App Store t…
Trezor said nearly 14,000 customers had personal data exposed after its fulfillment partner ShipMonk suffered an unauthorized access to its systems, though its own infrastructure and wallets remain secure.
The White House has signed a national security presidential memorandum that enables private security companies to apply for approval to hack foreign cybercrime organizations. The program will be overseen by executive directors designated by the Justice and Homeland Securi…
The best antivirus software to protect your computer in 2026
ZDNET experts put every product through rigorous testing and research to curate the best options for you. Our favorite antivirus software protects your PC, laptop, and mobile devices from malware without costing a fortune.
The Singapore police issued a warning about a scam involving compromised Telegram accounts. Victims receive a message with a fake public transport voucher link, which leads to a phishing page asking for personal details. The scammers then seize control of the victim's Tel…
Scammers are sending iMessages pretending to be the Singapore police or courts, claiming unpaid fines and asking victims to click links or reply with codes. The police advise verifying notices on official websites, using iMessage spam filters, installing ScamShield, and e…
New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture passwords, take over third-party …