Category: Phishing Attacks
-
A newly discovered phishing-as-a-service platform called ARToken PhaaS appears to operate as an affiliate of the EvilTokens phishing ecosystem, giving cybercriminals an advanced toolkit for compromising Microsoft 365 accounts. Researchers say the platform automates account takeovers, steals authentication tokens, and includes powerful tools for business email compromise (BEC) attacks. Cisco Talos Uncovers ARToken PhaaS Platform…
-
A new FIFA World Cup 2026 phishing campaign is targeting football fans and employees with convincing emails that promise exclusive tournament merchandise. Researchers warn that the scam installs Voidrift malware, giving attackers access to corporate networks while successfully evading several leading email security platforms. Fake FIFA Merchandise Emails Deliver Voidrift Malware Cybersecurity researchers at Cofense…
-
Microsoft has uncovered a sophisticated hotel phishing campaign targeting hospitality businesses across Europe and Asia. The attackers disguise malware as photo attachments and trick hotel employees into opening them. Once activated, the files install malware that gives cybercriminals long-term access to infected systems. Microsoft has not linked the activity to a known threat group, and…
-
Cybercriminals have found a new way to exploit the Shop app by placing fake purchase receipts directly into users’ order histories. The fraudulent orders appear alongside legitimate purchases and encourage victims to call fake customer support numbers, where scammers attempt to steal personal and financial information. Researchers warn that the tactic is more convincing than…
-
The Bluekit phishing kit has received a significant upgrade that allows cybercriminals to steal authenticated user sessions more effectively. Security researchers have discovered that the phishing-as-a-service (PhaaS) platform now supports browser-in-the-middle (BitM) attacks, replacing its previous interception technique with a more advanced method for compromising online accounts. The latest version also introduces additional evasion capabilities,…
-
A WhatsApp phishing attack is targeting businesses with fake document requests that lead to malware infections. Researchers say attackers are posing as business contacts and sending messages that appear to contain legitimate files. Instead of delivering invoices or contracts, the campaign installs ConnectWise RAT, a remote access tool that allows attackers to take control of…
-
Football fans searching for free World Cup coverage are facing a growing wave of online threats. Security researchers have uncovered more than 40 websites posing as free streaming platforms for the 2026 FIFA World Cup. While these sites promise live access to matches, many serve a different purpose entirely. Instead of delivering reliable streams, the…
-
An AI phishing service disrupted by U.S. authorities has exposed the growing role of artificial intelligence in cybercrime. The FBI, working alongside Google and security researchers, helped dismantle a large-scale phishing operation known as Outsider. Investigators linked the service to more than one million malicious URLs designed to steal credentials and payment card information from…
-
Meta says it has disrupted a new campaign of WhatsApp phishing attacks linked to spyware vendor NSO Group. The company claims the activity violated a court order that permanently prohibited NSO from targeting WhatsApp users after a lengthy legal battle over the deployment of Pegasus spyware. The latest discovery suggests that efforts to target WhatsApp…
-
Visitors to several well-known websites recently faced an unexpected threat when fake Microsoft login prompts began appearing on pages associated with trusted brands. Security researchers traced the activity to a Polyfill-related compromise that allowed attackers to inject phishing content into legitimate websites, including pages connected to Toshiba and Muji. The incident demonstrates how cybercriminals continue…