A newly discovered phishing campaign is leveraging a Unicode homoglyph trick to impersonate Booking.com and distribute malicious MSI installers capable of delivering infostealers or remote access trojans (RATs). This attack,Read More →
Researchers from Cisco Talos have uncovered a novel and very sophisticated phishing-as-a-service (PaaS) offering, which they have given the name “Greatness.” Greatness is a service that has been operational sinceRead More →
Imagine that you get an email from DocuSign, which is a reputable and well-known electronic signature platform. If you clicked on the link in the email, you would most likelyRead More →
During the fourth quarter of 2022, Yahoo was the target of twenty percent of all brand phishing attempts. Investigators discovered tactics that involved sending harmful phishing emails posing as YahooRead More →
A sophisticated phishing tool called SquarePhish employs a method that combines QR codes with the OAuth Device code authentication procedure. A malicious QR code email may be sent to aRead More →
Have I Been Pwned is a service used by those who want to verify if the password they use or their email address was exposed as a result of aRead More →
Without a doubt, Phishing attacks are a very big problem on the Internet. Hackers use these types of strategies to steal passwords and thus compromise users’ privacy. Although we haveRead More →
A worrying number of cybercriminal campaigns occur with no indication of those responsible for these online crimes, especially those with financial motivations. However, in some cases, threat actors leave enoughRead More →
Researchers at security firm Fortinet report detecting a fraudulent campaign based on the delivery of three pieces of fileless malware with enhanced confidential information-stealing capabilities. The malware is delivered throughRead More →