New Wave of AiTM Phishing Targets TikTok for Business
Threat IntelligenceInfosecurity Magazineil y a 19 heures
Push Security has uncovered a new AiTM phishing campaign targeting TikTok for Business accounts using Google and TikTok themed login pages
Flux RSS
— Sources secondairesTikTok for Business accounts targeted in new phishing campaign
Threat IntelligenceBleepingComputeravant-hier
Threat actors are targeting TikTok for Business accounts in a phishing campaign that prevents security bots from analyzing malicious pages. [...]
Indian government probes CCTV espionage operation linked to Pakistan
Threat IntelligenceThe Register Securityavant-hier
Police found cameras pointing at infrastructure Indian authorities have reportedly ordered an audit of the nation’s CCTV cameras, after police uncovered what they claim was a Pakistan-backed surveillance operation.…
Bubble AI app builder abused to steal Microsoft account credentials
Threat IntelligenceBleepingComputeril y a 3 jours
Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building platform Bubble to generate and host malicious web apps. [...]
Tycoon2FA Phishing Service Resumes Activity Post-Takedown
Threat IntelligenceInfosecurity Magazineil y a 5 jours
Tycoon2FA phishing platform resumes activity post-takedown, leveraging AITM techniques to bypass MFA
Smooth criminals talking their way into cloud environments, Google says
Threat IntelligenceThe Register Securityil y a 5 jours
Voice phishing is second most common initial access method across all IR probes, and top in cloud break-ins RSAC 2026 Voice phishing surged last year to become the second most common method used by cybercriminals to gain initial access to their victims' IT estate – and the No. 1 tactic used when breaking into cloud environments.…
Russians are posing as Signal support to launch phishing attacks
Threat IntelligenceThe Register Securityil y a 6 jours
PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more! Infosec In Brief Russian intelligence-affiliated parties are posing as customer support services on commercial messaging applications such as Signal to compromise accounts and conduct phishing attacks, the FBI and Cybersecurity and Infrastructure Security Agency (CISA) warned last Friday.…
Researchers Warn of Global Surge in Fake Shipment Tracking Scams
Threat IntelligenceInfosecurity Magazineil y a 12 jours
Some of these campaigns are linked to Darcula, a Chinese-language phishing-as-a-service platform
Zero‑Day Attacks on Enterprise Software Reach Record High, Google Warns
Threat IntelligenceInfosecurity Magazineil y a 22 jours
Almost a quarter of the zero days detected by Google in 2025 targeted security and networking appliances
Zero-Click FreeScout Bug Enables Remote Code Execution
Threat IntelligenceInfosecurity Magazineil y a 23 jours
Ox Security warns that Mail2Shell could enable threat actors to hijack FreeScout systems without user interaction
Iranian Cyber Threat Actor Targets Iraqi Government Officials in AI-Powered Campaign
Threat IntelligenceInfosecurity Magazineil y a 25 jours
Zscaler ThreatLabz assessed with medium to high confidence that an Iranian adversary targeted Iraq’s Ministry of Foreign Affairs in a new cyber-attack
Chrome Unveils Plan For Quantum-Safe HTTPS Certificates
Threat IntelligenceInfosecurity Magazineil y a 26 jours
Google Chrome initiates quantum-resistant measures via Merkle Tree Certificates to secure HTTPS
Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify
Threat IntelligenceInfosecurity Magazineil y a 30 jours
2025 saw 32M phishing emails, with identity threats surpassing vulnerabilities
Malicious NuGet Package Targets Stripe Developers
Threat IntelligenceInfosecurity Magazineil y a 31 jours
Malicious NuGet package mimicking Stripe's library targeted developers
Multifaceted Phishing Scheme Deceives Bitpanda Customers
Threat IntelligenceInfosecurity Magazineil y a 32 jours
Phishing attack mimicking Bitpanda targets users, harvesting credentials and personal information
AI-powered Cyber-Attacks Up Significantly in the Last Year, Warns CrowdStrike
Threat IntelligenceInfosecurity Magazineil y a 32 jours
CrowdStrike Global Threat Report warns how adversaries are leveraging AI to make campaigns more efficient and more effective
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls
Threat IntelligenceInfosecurity Magazineil y a 33 jours
A low-skilled Russian-speaking attacker has used GenAI tools to help deploy a successful attack workflow targeting FortiGate instances
Starkiller: New ‘Commercial-Grade’ Phishing Kit Bypasses MFA
Threat IntelligenceInfosecurity Magazineil y a 37 jours
A new cybercriminal toolkit uses proxies to mimic popular online services and represents a “significant escalation in phishing infrastructure,” warn researchers at Abnormal
Low-Skilled Cybercriminals Use AI to Perform "Vibe Extortion" Attacks
Threat IntelligenceInfosecurity Magazineil y a 39 jours
Unit 42 researchers observed a low-skilled threat actor using an LLM to script a professional extortion strategy, complete with deadlines and pressure tactics
Operation DoppelBrand Weaponizes Trusted Brands For Credential Theft
Threat IntelligenceInfosecurity Magazineil y a 40 jours
New phishing campaign dubbed Operation DoppelBrand targeted major financial firms like Wells Fargo