Technology ❯ Cybersecurity

Phishing

Email Scams Scams Social Engineering Email Security Malware Online Scams Phishing-as-a-Service Fraud Prevention Fraud Online Fraud

Brevo Flaw Lets Phishers Send Fake Trezor Alerts to 347,000 Users

The authorization bug let attackers use legitimate mailing infrastructure to pose as vendors and trick users into revealing wallet recovery phrases.

BigBear 2.0 Phishing Service Bypasses MFA to Steal 5,100+ Microsoft 365 Credentials

Invisible Unicode Characters Used to Hide Finance Phishing in Millions of Emails

Invisible Unicode Used to Hide Phishing Keywords, Microsoft Warns

Scammers Impersonate MyChart To Phish Patients' Logins and Payments

AnonyMousKIT PhaaS Uses AI to Harvest iPhone Passcodes and Bypass Activation Lock

Threat Actor Used Fake Crypto Executive and Booby‑Trapped Google Doc to Target Security Researcher

BitBox Releases Firmware to Fix Two Severe Wallet Flaws

Trader Loses $550,000 After Phishing Site Appeared in Google Paid Search

Lazarus Exploits Windows Zero‑Day in New 'Operation Dream Job' Wave

FBI and NCAA Launch Education Campaign to Shield College Athletes From Sextortion

Critical Metabase SQL Injection Exploited to Steal Customer Data

Microsoft Warns of 'CaptiveCrunch' Campaign That Hijacks Hotel Wi‑Fi to Steal Tokens and Install Spyware

Microsoft Warns of 'CaptiveCrunch' Hotel Wi‑Fi Campaign Linked to Russia‑Linked Hackers

Wall Street Firms Hit by AI‑Enabled Voice‑Phishing Campaign

SMOKE#SCREEN Campaign Uses Legitimate ScreenConnect Installs to Give Attackers Persistent Access

Phishing Campaign Posing as Bank of America Installs Trojanised ScreenConnect with Silent UAC Bypass

Greatness PhaaS Uses Device‑Code Phishing and AiTM Proxies to Steal Microsoft 365 Tokens

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

Russian State‑Linked APT Uses Hotel Wi‑Fi Captive Portals to Steal Microsoft 365 Credentials