Collecting Cyber-News from over 60 sources

Tag: phishing

BeatBanker Trojan Spreads via Phishing, Deploys Crypto Miner and RAT on Targeted Devices

Mar 11, 2026 9:48 AM

Tags: android, banking, crypto, cyber, fraud, google, malware, phishing, rat

BeatBanker is a new Android malware campaign targeting users in Brazil, combining banking fraud, crypto”‘mining, and, in its latest wave, full device takeover via a RAT. It spreads almost entirely through phishing pages that mimic the Google Play Store and trick victims into installing weaponized APKs disguised as legitimate apps and updates. The operation starts…
12 ways attackers abuse cloud services to hack your enterprise

Mar 11, 2026 8:47 AM

Tags: access, ai, api, attack, backdoor, backup, business, ceo, china, cloud, communications, control, corporate, credentials, crowdstrike, cyber, cybercrime, cyberespionage, cybersecurity, data, defense, detection, endpoint, exploit, extortion, firewall, framework, group, hacking, incident, incident response, infrastructure, kubernetes, login, malicious, malware, microsoft, network, openai, phishing, ransomware, russia, service, social-engineering, threat, tool

Hiding command-and-control in trusted APIs: Attackers are also forging malware that routes C2 traffic through trusted services such as OpenAI APIs.For example, the SesameOp backdoor routes traffic through OpenAI’s Assistants API, masking C2 communications as legitimate AI development work.”In cases such as the SesameOp backdoor, traffic looks like normal AI development activity,” says Parthiban Jegatheesan,…
Malvertising: Herbert Grönemeyer und Hasso Plattner werden missbraucht

Mar 11, 2026 7:47 AM

Tags: crypto, fraud, mail, malware, phishing

Aktuell weltweite Kampagne mit russischem cyberkriminellem Hintergrund. 310 koordinierte Kampagnen für digitalen Betrug in 25 Ländern auf sechs Kontinenten. Phishing-Mails mit aggressivem telefonischem Nachsetzen. Fake-Anzeigen als Ausgangspunkt für Anlagenbetrug. Depot-Empfehlungen von Herbert Grönemeyer oder vermeintliche Krypto-Tipps von SAP”‘Gründer Hasso Plattner sind derzeit Teil einer groß angelegten internationalen Betrugskampagne. Dahinter steckt ein global agierendes Netzwerk… First…
Jack & Jill went up the hill, and an AI tried to hack them

Mar 11, 2026 5:48 AM

Tags: access, ai, attack, authentication, data, email, endpoint, exploit, hacking, injection, jobs, phishing, RedTeam, service, social-engineering, strategy, tool, vulnerability

get_or_create_company” endpoint that determines from a user’s email domain whether it should create a new company on the platform or associate them with an existing company to auto-join CodeWall’s account. Thanks to the bug that failed to check user roles when onboarding, it then obtained full org admin privileges and was able to access team…
Jack & Jill went up the hill, and an AI tried to hack them

Mar 11, 2026 5:48 AM

Tags: access, ai, attack, authentication, data, email, endpoint, exploit, hacking, injection, jobs, phishing, RedTeam, service, social-engineering, strategy, tool, vulnerability

get_or_create_company” endpoint that determines from a user’s email domain whether it should create a new company on the platform or associate them with an existing company to auto-join CodeWall’s account. Thanks to the bug that failed to check user roles when onboarding, it then obtained full org admin privileges and was able to access team…
Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out!

Mar 10, 2026 9:48 PM

Tags: access, ai, apt, attack, cloud, credentials, cybersecurity, data, email, exploit, extortion, google, incident response, injection, intelligence, LLM, metric, phishing, ransomware, rce, remote-code-execution, saas, service, social-engineering, software, theft, threat, vulnerability, zero-day

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Cloud Threat Horizons Report, #13 (full version, no info to enter!) that we just released (the official blog for #1 report, my unofficial blogs for #2, #3, #4, #5, #6, #7, #8, #9, #10, #11 and #12).…
Threat intelligence by ESET is a game changer

Mar 10, 2026 9:48 PM

Tags: ai, business, ciso, cybersecurity, data, detection, edr, exploit, identity, india, intelligence, phishing, service, social-engineering, threat, vulnerability, zero-day

The Advent of AI Ransomware detections in India surged by 70% between the second half of 2024 and the first half of 2025 as per ESET’s Telemetry. Phishing remains the most prevalent cyberthreat affecting Indian users, underscoring the ongoing need for vigilance and education around social engineering tactics.Attacks are increasing on edge systems and appliances as…
Microsoft brings phishing-resistant Windows sign-ins via Entra passkeys

Mar 10, 2026 5:47 PM

Tags: authentication, microsoft, passkey, phishing, windows

Microsoft is rolling out passkey support for Microsoft Entra on Windows devices, adding phishing-resistant passwordless authentication via Windows Hello. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-entra-brings-phishing-resistant-sign-in-to-windows/
Wenn Phishing plötzlich perfekt klingt: KI hebt Social Engineering auf ein neues Level

Mar 10, 2026 5:47 PM

Tags: ai, cyberattack, phishing, social-engineering

Der Fokus verschiebt sich deutlich: Nicht mehr der sprachliche Fehler verrät den Angriff sondern die dahinterliegende Manipulationsstrategie. Neben überzeugenden Texten nutzen Angreifer zunehmend technische Tricks, um ihre Kampagnen noch glaubwürdiger zu machen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/wenn-phishing-ploetzlich-perfekt-klingt-ki-hebt-social-engineering-auf-ein-neues-level/a44060/
Phishing Scammers Impersonating City, County Officials, Demanding Payment: FBI

Mar 10, 2026 4:46 PM

Tags: country, email, phishing, scam

Scammers are impersonating local municipal officials around the country with seemingly legitimate phishing messages demanding payment for permits. The bad actors grab publicly available information and use them in their emails to fool their targets. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/phishing-scammers-impersonating-city-county-officials-demanding-payment-fbi/
Fighting Fire with Fire: AI-Assisted Microsegmentation to Combat AI-Enabled Hackers

Mar 10, 2026 3:48 PM

Tags: ai, cyberattack, deep-fake, hacker, malware, phishing, service, social-engineering

Thanks to GenAI, cyberattacks are coming faster and harder than ever before. The IC3 consortium at MIT Sloan warns that: “AI is being used regularly in cyberattacks to create malware, phishing campaigns, and deepfake-driven social engineering, such as fake customer service calls. Large language models are being employed to generate code and phishing content. There……
Cybercriminals impersonating city officials to steal permit payments, FBI says

Mar 10, 2026 3:48 PM

Tags: cybercrime, email, phishing

In a notice on Monday, the agency said people and businesses with active applications for the permits are being targeted with phishing emails that often include detailed, accurate information “including property addresses, case numbers, and the true names of city and county officials.” First seen on therecord.media Jump to article: therecord.media/cybercriminals-impersonate-city-officials-permit-payments
Top 10 Best Anti-Phishing Tools in 2026

Mar 10, 2026 3:48 PM

Tags: ai, business, cyber, cybersecurity, deep-fake, email, exploit, phishing, spam, threat, tool

The cybersecurity landscape has shifted dramatically, and traditional spam filters are no longer enough to protect sensitive enterprise data. As we navigate through 2026, threat actors are leveraging sophisticated AI-powered exploits to bypass standard security protocols, craft hyper-realistic deepfake audio messages, and execute highly targeted Business Email Compromise (BEC) campaigns. Phishing has evolved from obvious,…
Signal and WhatsApp accounts targeted in phishing campaign

Mar 10, 2026 2:47 PM

Tags: intelligence, malicious, phishing

Dutch intelligence warns that attackers are hijacking Signal and WhatsApp accounts by tricking users into sharing verification codes or linking a malicious device. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/signal-and-whatsapp-accounts-targeted-in-phishing-campaign/
Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts

Mar 10, 2026 2:47 PM

Tags: email, phishing

Phishers are targeting AWS accounts holders with fake email security alerts and redirecting them to a high-fidelity clone of the AWS Management Console sign-in page, Datadog … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/10/aitm-phishing-aws-accounts/
The OT security time bomb: Why legacy industrial systems are the biggest cyber risk nobody wants to fix

Mar 10, 2026 12:47 PM

Tags: access, attack, authentication, awareness, business, ciso, compliance, control, cyber, cybersecurity, data, detection, exploit, firewall, incident, incident response, infrastructure, insurance, ISO-27001, metric, mfa, monitoring, network, office, phishing, ransomware, regulation, resilience, risk, risk-management, service, siem, soc, stuxnet, supply-chain, tool, vpn, vulnerability, zero-day

Why everyone knows it’s burning, but nobody pulls the fire alarm: When I talk to OT managers, production leads or plant engineers, I rarely hear, “We didn’t know we had a problem.” Far more often, it’s, “We know it’s critical, but we can’t just shut it down.” This gap between awareness and action is the…
Law enforcement disrupted Tycoon 2FA phishing-as-a-service platform

Mar 10, 2026 10:47 AM

Tags: 2fa, email, infrastructure, law, microsoft, phishing, service

Authorities disrupted the Tycoon 2FA phishing-as-a-service platform used to send millions of phishing emails to over 500,000 orgs worldwide. The joint effort, led by Microsoft, Europol, and industry partners, aimed to target the infrastructure of Tycoon 2FA phishing-as-a-service platform responsible for tens of millions of fraudulent emails reaching over 500,000 organizations each month worldwide. By…
Phishing campaign spoofs local officials to steal permit fees

Mar 10, 2026 10:47 AM

Tags: cybercrime, phishing

The FBI is warning about a phishing scheme in which cybercriminals impersonate city and county officials to solicit fraudulent payments for planning and zoning permits. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/10/fbi-phishing-scheme-planning-zoning-permit-fees/
SurxRAT Android Malware Uses LLMs for Phishing and Data Theft

Mar 10, 2026 9:48 AM

Tags: access, android, control, credentials, cyber, cybercrime, data, LLM, malware, phishing, ransomware, theft

A new Android Remote Access Trojan (RAT) named SurxRAT, which is being sold as a commercial malware platform through a Telegram-based malware”‘as”‘a”‘service (MaaS) ecosystem. The malware, marketed under the SURXRAT V5 branding, enables cybercriminals to create customized Android malware builds capable of surveillance, credential theft, remote device control, and ransomware-style device locking. The malware appears…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
Signed malware posing as Teams and Zoom apps drops RMM backdoors

Mar 10, 2026 8:47 AM

Tags: access, adobe, backdoor, cyber, malware, microsoft, monitoring, phishing, threat

A wave of phishing campaigns that used signed malware posing as popular workplace apps like Microsoft Teams, Zoom, and Adobe Reader to deploy remote monitoring and management (RMM) backdoors. The activity, attributed to an as-yet unidentified threat actor, highlights how trusted branding and valid-looking digital signatures can be abused to gain stealthy, long-term access in…
Signal Confirms Sophisticated Phishing Scheme Caused Account Compromises

Mar 10, 2026 8:47 AM

Tags: attack, breach, cyber, encryption, government, infrastructure, phishing

The secure messaging platform Signal recently confirmed active, targeted phishing campaigns resulting in severe account takeovers. These sophisticated attacks have successfully compromised the accounts of high-profile individuals, specifically targeting government officials and journalists. Despite these high-profile breaches, Signal explicitly clarified that its underlying infrastructure and end-to-end encryption protocols remain robust and completely uncompromised. The breaches…
Microsoft Teams phishing targets employees with A0Backdoor malware

Mar 10, 2026 1:48 AM

Tags: access, hacker, healthcare, malware, microsoft, phishing

Hackers contacted employees at financial and healthcare organizations over Microsoft Teams to trick them into granting remote access through Quick Assist and deploy a new piece of malware called A0Backdoor. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-teams-phishing-targets-employees-with-backdoors/
Microsoft Teams phishing targets employees with A0Backdoor malware

Mar 10, 2026 1:48 AM

Tags: access, hacker, healthcare, malware, microsoft, phishing

Hackers contacted employees at financial and healthcare organizations over Microsoft Teams to trick them into granting remote access through Quick Assist and deploy a new piece of malware called A0Backdoor. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-teams-phishing-targets-employees-with-backdoors/
Microsoft Teams phishing targets employees with backdoors

Mar 10, 2026 12:47 AM

Tags: access, backdoor, hacker, healthcare, malware, microsoft, phishing

Hackers contacted employees at financial and healthcare organizations over Microsoft Teams to trick them into granting remote access through Quick Assist and deploy a new piece of malware called A0Backdoor. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-teams-phishing-targets-employees-with-backdoors/
FBI alert: scammers target zoning permit applicants

Mar 9, 2026 11:48 PM

Tags: attack, phishing, scam

The FBI warns of phishing attacks where crooks impersonate U.S. city and county officials to target people requesting planning and zoning permits. The FBI warns that scammers are impersonating U.S. city and county officials in phishing campaigns targeting businesses and individuals applying for planning or zoning permits. Using publicly available information, attackers craft messages that…
Malicious Chrome Extension Targets imToken Wallet Users

Mar 9, 2026 11:48 PM

Tags: browser, chrome, crypto, malicious, phishing

A fake Chrome extension impersonating imToken redirects users to phishing pages to steal crypto wallet keys. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/malicious-chrome-extension-targets-imtoken-wallet-users/
Dutch govt warns of Signal, WhatsApp account hijacking attacks

Mar 9, 2026 11:48 PM

Tags: access, attack, government, hacker, military, phishing, russia

Russian state-sponsored hackers have been linked to an ongoing Signal and WhatsApp phishing campaign targeting government officials, military personnel, and journalists to gain access to sensitive messages. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dutch-govt-warns-of-signal-whatsapp-account-hijacking-attacks/
Bank Phishing Refunds Should Be Easier, Says CJEU Advisor

Mar 9, 2026 10:47 PM

Tags: finance, phishing, scam, unauthorized

Top European Court Advisor Says Policy Should Be ‘Refund Now, Sue Later’. Banks must promptly refund phishing victims when the scams lead to unauthorized transactions, an advisor to the European Union’s top court has said. The case in question involves an unnamed Polish woman who got duped on an online auction platform. First seen on…