Massive Phishing Campaign Targets Trezor Users After Brevo Security Breach
PremiumBrevo compromise led to phishing emails targeting 347,000 Trezor-related addresses; 2,500 users clicked malicious links.
§Topic · Phishing & Social Engineering
Phishing & Social Engineering
Phishing kits, spear-phishing campaigns, BEC fraud, and social engineering tactics targeting your organization.
All dispatchesMonday, September 14
AI-Driven Phishing Campaigns Surge with Unprecedented Volume and Precision
PremiumAdversaries leveraged AI to generate one million personalized fraud emails over three days, increasing scale and credibility.
AI-Driven Phishing Tops Fraud Concerns for Businesses
PremiumSurvey finds 60% of companies see rising fraud losses and list AI-generated phishing as the top AI-enabled fraud concern.
Sophisticated Phishing Campaigns Exploit Microsoft 365 Vulnerabilities
PremiumPasskey-themed phishing campaigns have been used to hijack Microsoft cloud accounts and exfiltrate corporate data.
Friday, September 11
Trezor Alerts Users to Phishing Risks After Email Provider Breach
PremiumTrezor warns that a third-party email provider breach enabled phishing targeting wallet users to steal credentials and funds.
Phishing Campaign Exploits Passkey Themes to Breach Microsoft 365 Accounts
PremiumAttackers use passkey-themed social engineering to hijack Microsoft 365 accounts, bypassing MFA and exfiltrating cloud data.
US Treasury Targets Chinese Scam Platform Xinbi Guarantee with Sanctions
PremiumUS Treasury sanctions Xinbi Guarantee for facilitating scams and money laundering, targeting its infrastructure and operators.
Monday, September 7
Wednesday, September 2
Cybercriminals Exploit Polygon Blockchain in New ClickFix Attack
ClickFix campaign used EtherHiding on Polygon to dynamically update C2 addresses after compromising 31 organizations.
Hackers Exploit Microsoft Teams Calls in Advanced Social Engineering Attack
Spring Ring campaign abuses Microsoft Teams help-desk calls to socially engineer remote execution and lateral network compromise.
Monday, August 31
Stealthy Chrome Extensions Exploit Users for Cryptocurrency and Data Theft
PremiumMultiple Chrome and Edge extensions delivered malware modules that steal crypto wallets, browser data, and inject ClickFix social engineering.
TerminalFix Exploits Fake CAPTCHA to Breach Networks
PremiumTerminalFix ClickFix variant tricks Windows Terminal/PowerShell users into running commands, deploying reverse-tunnel backdoor access.
Wednesday, August 26
Monday, August 24
Friday, August 21
Monday, August 17
AI Deepfake Scam Targets Minor, Sparks Cybersecurity Concerns
PremiumAn AI deepfake extortion ring used fabricated videos to blackmail a minor, escalating to life-threatening coercion and police action.
AmnesiaStealer Malware Threatens macOS with Enhanced Control
PremiumNew macOS infostealer steals keychain and browser data via ClickFix and supports remote interactive browser control.
Monday, August 10
Levi Strauss Hit by Social Engineering Cyberattack
PremiumLevi Strauss suffered a breach after social-engineering of three employees gave attackers access to internal systems and data.
Phishing Campaign Exploits Microsoft 365 Accounts in Financially Driven Attacks
PremiumActive AitM phishing campaign hijacks Microsoft 365 accounts to collect payroll and finance emails using residential proxies.
Wednesday, August 5
Get these articles delivered to your inbox.
Subscribe free