Microsoft Cripples Global Phishing Network Responsible for Over a Billion Scams
PremiumMicrosoft disrupted a Chinese-language phishing ecosystem (Yam Store) responsible for over one billion scam messages.
§Topic · Phishing & Social Engineering
Phishing & Social Engineering
Phishing kits, spear-phishing campaigns, BEC fraud, and social engineering tactics targeting your organization.
All dispatchesWednesday, October 14
Friday, October 9
ASOS Data Breach: Social Engineering and Credential Theft Uncovered
PremiumASOS links customer data exposure to social engineering that led to stolen employee credentials and unauthorized notifications to customers.
Wazza Phishkit: A New Threat to Banking, Government, and Manufacturing
PremiumWazza phishkit delivers advanced session management and filtering to target banking, government, and manufacturing, improving credential harvesting success.
Wednesday, October 7
Phishing Alert: Fake AI Sites Target Advertising Accounts and MFA Codes
Phishing campaign uses fake ChatGPT/Gemini/Claude sites to steal ad accounts and MFA codes via browser-in-browser attacks.
Nikkei Employee Emails Compromised in Security Breach
Nikkei reports attackers breached employee Microsoft and Google accounts, using one to send thousands of phishing emails.
ClickFix Attack Exploits Browser Cache to Deliver Malicious Payloads
ClickFix prefetches payloads into browser cache disguised as PNGs to bypass Run limits and execute malicious scripts.
Monday, October 5
Friday, October 2
Wednesday, September 30
Ex-US Air Force Members Jailed for BEC and Phishing Scams
Two ex-Air Force members received a combined 189-month sentence for multi-year BEC and phishing fraud operations.
Gambling Philanthropist Falls Victim to $1.25M Social Engineering Scam
High-profile social engineering scam resulted in $1.25M loss from a prominent philanthropist via sophisticated deception.
Cybercriminals Exploit ChatGPT to Spread RAT Malware
Malicious sponsored search results promote custom ChatGPTs that guide users into ClickFix flows to install RATs.
Deepfake Threats Push Corporate Boards to Prioritize Security
Survey finds deepfakes increasingly used in social engineering, prompting board-level concern after an executive fell for a scam.
Monday, September 28
Interpol Exposes Expanding Global Fraud Networks
PremiumInterpol reports large-scale global fraud losses, highlighting growth of organized scam economies and financial crime trends.
Fraudulent Trading App Scam Costs Thane Resident ₹1.1 Crore
PremiumConsumer fell victim to a fake trading app scam, losing ₹1.1 crore after fraudulent trading and withdrawal restrictions.
Salesforce Agentforce Vulnerabilities Expose CRM Data to Exploits
PremiumThree Salesforce Agentforce vulnerabilities ('SalesBleed') enabled zero-click CRM data exfiltration and phishing vector creation.
Wednesday, September 23
AI-Powered Phishing Campaign Targets Companies with Sophisticated Scams
Microsoft-tracked AI-assisted phishing campaign sent more than one million personalized payment-diversion scam emails.
SideCopy Expands Espionage Campaign to Indian Academia with ReverseRAT
SideCopy uses spear-phishing and mshta.exe to deliver ReverseRAT, targeting Indian academic institutions for espionage.
Friday, September 18
Brevo Supply Chain Attack Compromises Customer Websites with Malicious Scripts
PremiumAttackers stole Brevo's Cloudflare API key to inject malicious ClickFix scripts into customer sites and embedded JavaScript files.
SilkParasite's Long-Standing Espionage Operation Unveiled in Central Asia
PremiumSilkParasite espionage infrastructure traced across Central Asia, using spear-phishing and trusted Windows programs to deploy RATs.
Get these articles delivered to your inbox.
Subscribe free