CERT-UA Impersonation Campaign Distributes AGEWHEEZE Malware
A recent phishing campaign impersonating Ukraine's CERT-UA has attempted to distribute AGEWHEEZE malware to various organizations, with limited success.
Tag phishing
cybersecurity: Iran-Linked Hackers Breach FBI Director’s Personal Email and Target Stryker
The Handala Hack Team, associated with Iranian interests, has breached the personal email of FBI Director Kash Patel and executed a destructive attack on Stryker, a major medical device provider.
Microsoft Alerts Users to IRS Phishing Campaign Targeting 29,000 Individuals
Microsoft has reported a significant phishing campaign exploiting the U.S. tax season, affecting approximately 29,000 users across various industries.
FBI Alerts on Russian Phishing Campaign Targeting Signal and WhatsApp Users
The FBI and CISA have reported a phishing campaign by Russian hackers aimed at compromising accounts on messaging platforms like Signal and WhatsApp, particularly targeting individuals of high intelligence value.
Microsoft Alerts on OAuth Scams Targeting Public Sector
Microsoft has issued a warning regarding ongoing OAuth abuse scams that exploit phishing tactics to deliver malware, particularly targeting government and public-sector organizations.
Google Links Suspected Russian Actor to CANFAIL Malware Targeting Ukrainian Entities
Google's Threat Intelligence Group has attributed a previously undocumented hacking group, potentially linked to Russian intelligence, to a series of malware attacks against Ukrainian organizations using CANFAIL.
APT36 and SideCopy Target Indian Entities with Cross-Platform RAT Campaigns
Recent cyber espionage campaigns have targeted Indian defense and government organizations using cross-platform remote access trojans (RATs).
Microsoft Outlook: Discovery of First Malicious Outlook Add-In Compromises Over 4,000 Credentials
A newly identified malicious add-in for Microsoft Outlook has been found to steal user credentials through a phishing scheme, affecting thousands of users.
German Agencies Issue Warning on Signal Phishing Campaign Targeting Key Figures
A joint advisory from Germany's BfV and BSI highlights a phishing campaign exploiting the Signal messaging app, aimed at politicians, military personnel, and journalists.
Substack Confirms Security Breach Involving User Data
Substack has revealed that an unauthorized party accessed user contact information months before detection, impacting email addresses and phone numbers.
