Security News

Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails
2025-03-13 15:26

Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking.com using an increasingly popular social engineering...

US cities warn of wave of unpaid parking phishing texts
2025-03-09 15:20

US cities are warning of an ongoing mobile phishing campaign pretending to be texts from the city's parking violation departments about unpaid parking invoices, that if unpaid, will incur an...

EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
2025-03-06 12:15

The financially motivated threat actor known as EncryptHub has been observed orchestrating sophisticated phishing campaigns to deploy information stealers and ransomware, while also working on a...

YouTube warns of AI-generated video of its CEO used in phishing attacks
2025-03-05 15:27

YouTube warns that scammers are using an AI-generated video featuring the company's CEO in phishing attacks to steal creators' credentials. [...]

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail
2025-03-03 17:26

Threat actors are targeting Amazon Web Services (AWS) environments to push out phishing campaigns to unsuspecting targets, according to findings from Palo Alto Networks Unit 42. The cybersecurity...

2024 phishing trends tell us what to expect in 2025
2025-02-27 12:12

Phishing has been the method most often employed by cybercriminals to achieve initial access to targeted organizations in 2024, according to risk advisory firm Kroll, which expects this trend to...

FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services
2025-02-25 05:51

Various industrial organizations in the Asia-Pacific (APAC) region have been targeted as part of phishing attacks designed to deliver a known malware called FatalRAT. "The threat was orchestrated...

Beware: PayPal "New Address" feature abused to send phishing emails
2025-02-22 21:01

An ongoing PayPal email scam exploits the platform's address settings to send fake purchase notifications, tricking users into granting remote access to scammers [...]

Darcula allows tech-illiterate crooks to create, deploy DIY phishing kits targeting any brand
2025-02-20 11:34

A new, improved version of Darcula, a cat-themed phishing-as-a-service (PhaaS) platform aimed at serving Chinese-speaking criminals, will be released this month and will allow malicious users to...

Darcula PhaaS can now auto-generate phishing kits for any brand
2025-02-20 11:00

The Darcula phishing-as-a-service (PhaaS) platform is preparing to release its third major version, with one of the highlighted features, the ability to create do-it-yourself phishing kits to...