phishing

Cybersecurity researchers are calling attention to phishing campaigns that impersonate popular brands and trick targets into calling phone numbers operated by threat actors. “A significant portion of email threats with …

Jun 30, 2025Ravie LakshmananCybercrime / Vulnerability The threat actor known as Blind Eagle has been attributed with high confidence to the use of the Russian bulletproof hosting service Proton66. Trustwave …

Jun 26, 2025Ravie LakshmananCyber Espionage / Malware An Iranian state-sponsored hacking group associated with the Islamic Revolutionary Guard Corps (IRGC) has been linked to a spear-phishing campaign targeting journalists, high-profile …

Jun 19, 2025Ravie LakshmananEmail Security / Identity Protection Threat actors with suspected ties to Russia have been observed taking advantage of a Google account feature called application specific passwords (or …

In summary: “The abuse of Cloudflare Tunnel infrastructure further complicates network visibility by giving the actor a disposable and encrypted transport layer for staging malicious files without maintaining traditional infrastructure,” …

A new campaign is making use of Cloudflare Tunnel subdomains to host malicious payloads and deliver them via malicious attachments embedded in phishing emails. The ongoing campaign has been codenamed …

Facebook is adding support for passkeys on its mobile app. That means you’ll be able to log into the platform using your device’s authentication method, like your fingerprint, face scan, …

The operation appears to be highly organized, with groups like “Neon SEO Academy” and “SEOLink” offering illicit SEO services for phishing and online casino fraud. With search engine providers still …

Kaspersky detected multiple infections in Brazil, Cuba, Mexico, India, Nepal, South Africa, and Egypt. Using CAPTCHA as a throw-off To add legitimacy to their operation and lower user suspicion, the …

The attack begins through compromised websites containing malicious JavaScript. When users interact with these sites, they’re redirected to deceptive pages that display error messages or CAPTCHA verifications, urging users to …