Category: Phishing Attacks
-
Hackers have launched an AI voice phishing campaign against several major Wall Street investment firms, including Citadel, Two Sigma, Point72 Asset Management, and Millennium Management. The attacks use AI-generated voices to impersonate trusted people over phone calls or voice messages. Rather than relying on malware, the threat actors appear to be targeting employees directly and…
-
A sophisticated Credit Agricole phishing operation used stolen email-service credentials, exposed cloud files, and carefully planned phone scams to steal from bank customers. Researchers uncovered the campaign on June 19 after finding a publicly accessible server used to run the fraud operation. The phishing infrastructure contained records for 912 people who submitted their banking credentials…
-
Microsoft Teams vishing attacks are being used to trick employees into granting remote access to their work devices, allowing attackers to deploy Chaos ransomware. Sophos tracked the campaign as STAC4749 after it targeted dozens of organisations in North America between February and June 2026. At least three intrusions ended in ransomware, while one attack moved…
-
A new Microsoft sign-in screen phishing campaign is using genuine Microsoft login pages to bypass traditional phishing checks. Instead of directing users to a fake website, attackers trick them into approving a malicious app after they sign in. Check Point researchers found that the campaign used convincing HR-themed Microsoft Teams lures. Once a victim grants…
-
ChatGPT has entered the top 10 most impersonated brands in phishing campaigns for the first time, according to new research. OpenAI accounted for 1.1% of tracked brand phishing attempts during the second quarter of 2026. The figure places the company alongside widely impersonated brands such as PayPal, WhatsApp and Facebook. Microsoft remains the main phishing…
-
Police have dismantled the Kratos phishing platform and arrested its alleged developer in Indonesia. Authorities in Germany and the United States seized more than 200 servers during the coordinated operation. The takedown disrupted the service’s central infrastructure. Investigators believe the action has made the phishing operation inoperable. Kratos allegedly operated as a phishing-as-a-service platform. It…
-
A new password manager phishing campaign is targeting LastPass and Bitwarden customers with fake security and compliance emails. The messages claim that users must review updated policies through an electronic document service. However, the included buttons lead to fraudulent websites that impersonate legitimate business platforms. These pages then pressure visitors to download untrusted files. LastPass…
-
A newly identified cybercrime group called Helix is targeting Microsoft SharePoint environments. The attackers rely on voice phishing, device-code phishing, and multi-factor authentication (MFA) abuse to steal sensitive company data. Researchers say the group focuses on compromising Microsoft 365 accounts first. It then steals SharePoint files and uses the data to extort victims. In some…
-
Security researchers have uncovered Forg365, a phishing-as-a-service (PhaaS) platform that uses artificial intelligence to create phishing campaigns targeting Microsoft 365 users. The platform combines adversary-in-the-middle (AiTM) attacks with device-code phishing to steal Microsoft 365 accounts. It also includes tools that help attackers maintain long-term access to compromised accounts without requiring victims to log in again.…
-
Belgian authorities have arrested a 19-year-old man suspected of playing a leading role in a Belgian phishing gang that targeted victims across Europe. Investigators believe the network stole hundreds of thousands of euros by impersonating bank employees, convincing victims to install remote access software, and laundering the proceeds through cryptocurrency and overseas accounts. Police say…