Tag: phishing

COLDRIVER APT Group Uses ClickFix to Deliver New PowerShell-Based Backdoor BAITSWITCH

Sep 25, 2025 9:49 AM

Tags: apt, backdoor, blizzard, credentials, cyber, group, malware, phishing, powershell, russia, social-engineering, threat, tool

Russia-linked threat actors continue targeting civil society with sophisticated social engineering campaigns and lightweight malware tools in September 2025. The campaign delivers two previously undocumented malware families: a downloader dubbed BAITSWITCH and a PowerShell-based backdoor named SIMPLEFIX. COLDRIVER, also tracked as Star Blizzard, Callisto, and UNC4057, has historically focused on credential phishing campaigns against NGOs, think tanks, journalists,…
COLDRIVER APT Group Uses ClickFix to Deliver New PowerShell-Based Backdoor BAITSWITCH

Sep 25, 2025 8:49 AM

Tags: apt, backdoor, blizzard, credentials, cyber, group, malware, phishing, powershell, russia, social-engineering, threat, tool

Russia-linked threat actors continue targeting civil society with sophisticated social engineering campaigns and lightweight malware tools in September 2025. The campaign delivers two previously undocumented malware families: a downloader dubbed BAITSWITCH and a PowerShell-based backdoor named SIMPLEFIX. COLDRIVER, also tracked as Star Blizzard, Callisto, and UNC4057, has historically focused on credential phishing campaigns against NGOs, think tanks, journalists,…
Neue Tarntechniken in Phishing-Kampagnen – Wie Angreifer mit Cloaking Phishing-Erkennung aushebeln

Sep 24, 2025 12:16 PM

Tags: phishing

First seen on security-insider.de Jump to article: www.security-insider.de/phishing-cloaking-angriffe-a-e3466c5d1f4c48fc5582be770b7e8202/
Neue Tarntechniken in Phishing-Kampagnen – Wie Angreifer mit Cloaking Phishing-Erkennung aushebeln

Sep 24, 2025 12:16 PM

Tags: phishing

First seen on security-insider.de Jump to article: www.security-insider.de/phishing-cloaking-angriffe-a-e3466c5d1f4c48fc5582be770b7e8202/
Ransomware’s Favorite Door? Phishing Attacks

Sep 23, 2025 10:16 PM

Tags: ai, attack, defense, identity, phishing, ransomware

Phishing has fueled ransomware in 2025, with AI-powered lures and PhaaS kits driving attacks. Learn how identity-first defenses can help. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/phishing-attacks-rise-spycloud-report/
Industrial Automation Threats Decline Slightly in Q2 2025, but Risks Remain

Sep 23, 2025 9:16 PM

Tags: automation, infection, malware, phishing, risk, threat

ICS malware infections fell in Q2 2025, but phishing and evolving threats keep OT environments at risk. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/industrial-automation-threats-decline-slightly-in-q2-2025-but-risks-remain/
GitHub moves to tighten npm security amid phishing, malware plague

Sep 23, 2025 4:15 PM

Tags: 2fa, github, malware, phishing

Hundreds of compromised packages pulled as registry shifts to 2FA and trusted publishing First seen on theregister.com Jump to article: www.theregister.com/2025/09/23/github_npm_registry_security/
Mobilfunker machtlos: So schicken Cyberkriminelle bis zu 100.000 Phishing-SMS pro Stunde

Sep 23, 2025 1:15 PM

Tags: phishing

First seen on t3n.de Jump to article: t3n.de/news/fake-mobilfunkmasten-phishing-sms-1708816/
Raffinierte KI-generierte Phishing-Mails: So kannst du dich vor dem Cyberangriff schützen

Sep 23, 2025 1:15 PM

Tags: ai, cyberattack, mail, phishing

First seen on t3n.de Jump to article: t3n.de/news/ki-generierte-phishing-mails-wie-schuetzen-1707881/
6 novel ways to use AI in cybersecurity

Sep 23, 2025 10:16 AM

Tags: access, ai, attack, authentication, business, ceo, cloud, cyberattack, cybersecurity, data, defense, detection, email, infrastructure, intelligence, malicious, malware, network, phishing, risk, service, tactics, technology, threat, tool, training

2. Machine-learning generative adversarial networks: Michel Sahyoun, chief solutions architect with cybersecurity technology firm NopalCyber, recommends using generative adversarial networks (GANs) to create, as well as protect against, highly sophisticated previously unseen cyberattacks. “This technique enables cybersecurity systems to learn and adapt by training against a very large number of simulated threats,” he says.GANs allow…
6 novel ways to use AI in cybersecurity

Sep 23, 2025 10:16 AM

Tags: access, ai, attack, authentication, business, ceo, cloud, cyberattack, cybersecurity, data, defense, detection, email, infrastructure, intelligence, malicious, malware, network, phishing, risk, service, tactics, technology, threat, tool, training

2. Machine-learning generative adversarial networks: Michel Sahyoun, chief solutions architect with cybersecurity technology firm NopalCyber, recommends using generative adversarial networks (GANs) to create, as well as protect against, highly sophisticated previously unseen cyberattacks. “This technique enables cybersecurity systems to learn and adapt by training against a very large number of simulated threats,” he says.GANs allow…
Nimbus Manticore Targets Defense and Telecom Industries with New Malware Attack

Sep 23, 2025 10:16 AM

Tags: attack, cyber, defense, iran, malware, phishing, spear-phishing, threat

Check Point Research has identified a long-running campaign by the Iranian-aligned threat actor Nimbus Manticore”, also known as UNC1549, Smoke Sandstorm, and the “Iranian Dream Job” operation”, targeting defense manufacturers, telecommunications, and aviation entities aligned with IRGC priorities. Recent activity demonstrates a sharpened focus on Western Europe, notably Denmark, Sweden, and Portugal, with spear-phishing lures…
Nimbus Manticore Targets Defense and Telecom Industries with New Malware Attack

Sep 23, 2025 10:16 AM

Tags: attack, cyber, defense, iran, malware, phishing, spear-phishing, threat

Check Point Research has identified a long-running campaign by the Iranian-aligned threat actor Nimbus Manticore”, also known as UNC1549, Smoke Sandstorm, and the “Iranian Dream Job” operation”, targeting defense manufacturers, telecommunications, and aviation entities aligned with IRGC priorities. Recent activity demonstrates a sharpened focus on Western Europe, notably Denmark, Sweden, and Portugal, with spear-phishing lures…
Hackers Exploit GitHub Notifications to Launch Phishing Attacks

Sep 23, 2025 9:16 AM

Tags: attack, credentials, cyber, cybercrime, cybersecurity, email, exploit, github, hacker, malicious, open-source, phishing, social-engineering

Cybersecurity researchers have uncovered a new phishing campaign that exploits GitHub’s official notification system to deliver malicious links and credential-stealing payloads. By capitalizing on the trust that open-source contributors place in GitHub’s communication channels, cybercriminals are able to bypass traditional email filters and social engineering defenses. The campaign begins with an email that closely mimics…
Microsoft DCU’s Takedown of RaccoonO365

Sep 23, 2025 5:16 AM

Tags: access, advisory, business, communications, computer, corporate, credentials, crime, crypto, cyber, data, detection, email, fraud, google, hacker, hacking, healthcare, infrastructure, intelligence, jobs, law, linkedin, login, malware, microsoft, password, phishing, privacy, qr, service, spam

When I saw the name of the Microsoft Digital Crime Unit’s latest target, “RaccoonO365” I probably reacted to it differently than most. With the help of a friend in Lagos, we’ve been watching the money launderers and things have reached a point that they now refer to what we previously called “Business Email Compromise” or…
ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks

Sep 22, 2025 7:16 PM

Tags: attack, cyberattack, cybersecurity, finance, group, hacker, hacking, malware, phishing, russia

Organizations in Belarus, Kazakhstan, and Russia have emerged as the target of a phishing campaign undertaken by a previously undocumented hacking group called ComicForm since at least April 2025.The activity primarily targeted industrial, financial, tourism, biotechnology, research, and trade sectors, cybersecurity company F6 said in an analysis published last week.The attack chain involves First seen…
Why attackers are moving beyond email-based phishing attacks

Sep 22, 2025 6:16 PM

Tags: attack, email, malicious, phishing, tactics

Phishing isn’t just email anymore. Attackers now use social media, chat apps & malicious ads to steal credentials. Push Security explains the latest tactics and shows how to stop multi-channel phishing where it happens, inside the browser. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/why-attackers-are-moving-beyond-email-based-phishing-attacks/
Sicherheit und Resilienz in der IT worauf es ankommt

Sep 22, 2025 5:16 PM

Tags: cyberattack, germany, phishing, resilience

Cyberangriffe sind in Deutschland mittlerweile Alltag. Unternehmen jeder Größe sehen sich wachsenden Bedrohungen ausgesetzt von gezielten Attacken bis hin zu groß angelegten Phishing-Kampagnen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cloud-security/sicherheit-und-resilienz-in-der-it
AI-powered phishing scams now use fake captcha pages to evade detection

Sep 22, 2025 3:16 PM

Tags: ai, attack, awareness, breach, captcha, ceo, credentials, data, defense, detection, email, finance, governance, identity, login, mfa, microsoft, network, passkey, password, phishing, resilience, scam, service, spam, strategy, threat, tool, training

The attack playbook: The phishing campaigns follow a familiar playbook at the outset. Victims typically receive spam emails that carry urgent, action-oriented messages such as “Password Reset Required” or “USPS Change of Address Notification”.Clicking on the embedded link doesn’t take the user directly to a credential-stealing site but instead loads what appears to be a…
AI-powered phishing scams now use fake captcha pages to evade detection

Sep 22, 2025 3:16 PM

Tags: ai, attack, awareness, breach, captcha, ceo, credentials, data, defense, detection, email, finance, governance, identity, login, mfa, microsoft, network, passkey, password, phishing, resilience, scam, service, spam, strategy, threat, tool, training

The attack playbook: The phishing campaigns follow a familiar playbook at the outset. Victims typically receive spam emails that carry urgent, action-oriented messages such as “Password Reset Required” or “USPS Change of Address Notification”.Clicking on the embedded link doesn’t take the user directly to a credential-stealing site but instead loads what appears to be a…
Massive Lucid PhaaS Campaign: 17,500 Phishing Domains Mimic 316 Global Brands

Sep 22, 2025 12:16 PM

Tags: cyber, cybercrime, cybersecurity, infrastructure, phishing, service, threat

Cybersecurity researchers at Netcraft have uncovered two sophisticated phishing campaigns linked to the Lucid and Lighthouse Phishing-as-a-Service (PhaaS) platforms, revealing a massive operation that has deployed over 17,500 phishing domains targeting 316 brands across 74 countries. This discovery highlights the growing threat of commercialized cybercrime infrastructure that enables low-skilled attackers to conduct sophisticated phishing operations…
CSO Awards winners highlight security innovation and transformation

Sep 22, 2025 10:16 AM

Tags: ai, attack, automation, awareness, best-practice, business, ciso, cloud, compliance, conference, control, cyber, cybersecurity, data, defense, detection, finance, flaw, framework, governance, group, guide, infrastructure, intelligence, login, malicious, metric, mitre, network, penetration-testing, phishing, privacy, programming, risk, risk-management, service, siem, skills, soc, software, technology, threat, tool, training, update, vulnerability, vulnerability-management

FSU tackles third-party risk with tighter vendor management program: Organization: Florida State UniversityProject: Third-Party Risk Management ProgramSecurity leader: Bill Hunkapiller, CISOOfficials at Florida State University wanted to ensure that data shared with outside entities was well protected. To achieve that, CISO Bill Hunkapiller and his team revamped its third-party risk management program so that the…
Cybercriminals Exploit ICS Computers via Scripts and Phishing Attacks

Sep 22, 2025 10:16 AM

Tags: attack, computer, control, cyber, cybercrime, cybersecurity, data, email, exploit, malicious, phishing, threat

Industrial control systems (ICS) continue to face increasing cybersecurity challenges as threat actors employ sophisticated malicious scripts and phishing campaigns to target critical infrastructure. According to new data from Q2 2025, while overall attack rates have shown a marginal decline, specific threat vectors including email-based attacks and malicious documents are intensifying their assault on industrial…
Cybersecurity Consulting

Sep 19, 2025 6:16 PM

Tags: attack, cyber, cybersecurity, exploit, phishing, ransomware, spam, supply-chain, threat, zero-day

As businesses expand digitally, their attack surface grows exponentially. Cyber threats today are no longer limited to viruses or spam emails”, they include ransomware, insider threats, phishing, supply chain attacks, zero-day exploits, and nation-state campaigns. To counter this complexity, organizations need more than tools”, they need expert guidance. This is where cybersecurity consulting comes in.…
17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge

Sep 19, 2025 4:16 PM

Tags: phishing, service, software

The phishing-as-a-service (PhaaS) offering known as Lighthouse and Lucid has been linked to more than 17,500 phishing domains targeting 316 brands from 74 countries.”Phishing-as-a-Service (PhaaS) deployments have risen significantly recently,” Netcraft said in a new report. “The PhaaS operators charge a monthly fee for phishing software with pre-installed templates impersonating, in some cases, First seen…
AI-Driven Phishing Attacks: Deceptive Tactics to Bypass Security Systems

Sep 19, 2025 3:15 PM

Tags: ai, attack, captcha, credentials, cyber, phishing, tactics

Since January, Trend Micro has tracked a surge in phishing campaigns using AI-powered platforms (Lovable, Netlify, Vercel) to host fake captcha pages that lead to phishing websites. This ploy misleads users and evades security tools. Victims are first shown a captcha, lowering suspicion, while automated scanners only detect the challenge page, missing the hidden credential-harvesting…
Attackers Abuse AI Tools to Generate Fake CAPTCHAs in Phishing Attacks

Sep 19, 2025 11:15 AM

Tags: ai, attack, captcha, phishing, tool

Trend Micro said the use of AI platforms to create and host fake CAPTCHA pages helps attackers develop more sophisticated phishing campaigns at scale and speed First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/attackers-abuse-ai-fake-captchas/
Phishing Attack

Sep 19, 2025 8:15 AM

Tags: attack, awareness, credentials, cyberattack, exploit, finance, login, phishing

Phishing remains one of the most successful cyberattack techniques today. Despite decades of awareness campaigns, it continues to deceive individuals and organizations into giving away sensitive information, from login credentials to financial details. Why? Because phishing exploits the human element, which is often the weakest link in cybersecurity. Phishing attacks are evolving in sophistication, scale,…
Phishing Attack

Sep 19, 2025 8:15 AM

Tags: attack, awareness, credentials, cyberattack, exploit, finance, login, phishing

Phishing remains one of the most successful cyberattack techniques today. Despite decades of awareness campaigns, it continues to deceive individuals and organizations into giving away sensitive information, from login credentials to financial details. Why? Because phishing exploits the human element, which is often the weakest link in cybersecurity. Phishing attacks are evolving in sophistication, scale,…
Breach Roundup: Microsoft, Cloudflare Dismantle RaccoonO365

Sep 18, 2025 11:15 PM

Tags: ai, breach, china, data, data-breach, hacker, microsoft, phishing, privacy, service, spear-phishing, technology

Also, Colt Services Outage Persists, Finland Charges Americans in Vastaamo Hack. This week, Microsoft hit RaccoonO365, Colt Technology Services, Finland charged a U.S. citizen in Vastaamo hack. RevengeHotels hackers used AI, Meta can’t overturn a privacy case verdict. Chinese hackers unleashed spear phishing emails. Prosper confirmed a data breach, as did Kering fashion houses. First…