Category: Phishing Attacks
-
Two former U.S. Air Force members will serve a combined 15 years and nine months in federal prison for BEC scams and phishing operations. Chijioke Timothy Odimegwu, 25, and Harafat Mogaji, 26, helped divert business payments by stealing login credentials and impersonating trusted contacts. The pair conducted the scheme while stationed at Dover Air Force…
-
A Calendly phishing attack tricked Segment co-founder Peter Reinhardt into granting a malicious app access to his X account. Attackers impersonated a WIRED journalist and placed an authorization request between genuine scheduling pages to make the approach convincing. Fake Interview Request Led to a Genuine Booking Page The attack began with an interview request about…
-
Microsoft and its partners have disrupted EvilTokens phishing infrastructure after the service compromised more than 12,000 accounts across over 10,000 organizations. The operation remains active, although Microsoft expects the intervention to reduce attack volume. UK police have also arrested two men suspected of administering the phishing service. Both were released on bail while the investigation…
-
Trezor says a phishing campaign targeted about 347,000 customer email addresses after hackers breached its third-party marketing provider, Brevo. Around 2,500 recipients clicked the malicious link before the company disabled it. The attackers sent fake security warnings from a legitimate Trezor email address. They claimed that a hardware flaw threatened the recovery seeds used to…
-
A phishing-as-a-service platform called BigBear 2.0 has compromised Microsoft 365 accounts at 258 organizations. The operation collected more than 5,000 credential records by intercepting passwords and authenticated session cookies. CloudSEK researchers gained administrator access to the service’s control panel. Their investigation uncovered 42 virtual private server nodes configured to target Microsoft 365 users. The BigBear…
-
Threat actors are using invisible Unicode characters to hide phishing lures from email security filters. The technique, known as ASCII smuggling, inserts hidden characters inside suspicious words. As a result, a message can appear normal to a recipient while bypassing keyword-based detection systems. Microsoft researchers identified a major campaign that used Unicode phishing lures in…
-
Researchers have identified an npm mirror phishing technique that uses package registries and public mirrors to host malicious redirect pages. Instead of infecting developers who download a package, attackers store harmful HTML files inside npm packages. Mirror services then copy those files and make them available from trusted developer-related domains. This approach can make phishing…
-
Researchers have uncovered AnonyMousKIT, a phishing-as-a-service platform that uses AI voice agents to target owners of stolen iPhones. The service reportedly helps criminals obtain passcodes, Apple Account credentials and two-factor authentication codes. Attackers can then unlock stolen devices, remove Activation Lock and access sensitive data. Researchers at SOCRadar say the platform has operated since early…
-
A newly discovered phishing framework called the JWR phishing kit gives criminals real-time visibility into the information victims type into fake websites. The tool can mimic payment, login and checkout pages for brands including PayPal, Apple, Shopify, WooCommerce, Klarna and banks. Unlike many phishing pages, JWR does not wait for a victim to submit a…
-
Hackers have launched an AI voice phishing campaign against several major Wall Street investment firms, including Citadel, Two Sigma, Point72 Asset Management, and Millennium Management. The attacks use AI-generated voices to impersonate trusted people over phone calls or voice messages. Rather than relying on malware, the threat actors appear to be targeting employees directly and…