Security News > 2024 > August > Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks
2024-08-19 10:02
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services. "Attackers can use Xeon to send messages through multiple software-as-a-service (SaaS) providers using valid credentials for the service providers," SentinelOne security researcher Alex Delamotte said in a report shared with The Hacker News.
News URL
https://thehackernews.com/2024/08/xeon-sender-tool-exploits-cloud-apis.html
Related news
- Cybercriminals exploit file sharing services to advance phishing attacks (source)
- Hackers use PoC exploits in attacks 22 minutes after release (source)
- PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing (source)
- Enhancing threat detection for GenAI workloads with cloud attack emulation (source)
- Microsoft: Ransomware gangs exploit VMware ESXi auth bypass in attacks (source)
- 'LockBit of phishing' EvilProxy used in more than a million attacks every month (source)
- How Phishing Attacks Adapt Quickly to Capitalize on Current Events (source)
- Google raps Iran's APT42 for raining down spear-phishing attacks (source)
- Attackers Exploit Public .env Files to Breach Cloud Accounts in Extortion Campaign (source)
- Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America (source)