A large-scale SMS phishing campaign is impersonating T-Mobile and warning recipients that their “rewards points” are about to expire, using…
A large-scale SMS phishing campaign linked to the Smishing Triad is using a sophisticated phishing kit dubbed JWR to harvest…
Phishing operators are increasingly shifting away from malware-laden attachments and toward trusted delivery services, authenticated domains, and multi-stage URL cloaking…
The UK government has started implementing passkey authentication for GOV. UK One Login,UK One Login, providing over 23 million users…
A phishing campaign that moves the credential-harvesting page out of attacker-controlled web infrastructure and into the victim’s browser. Unlike ordinary…
A large-scale phishing operation is abusing trusted Google services as a multi-stage redirect network to bypass email security controls, deliver…
Microsoft is developing a new security feature for Teams messaging that will obscure QR codes sent by external users. This…
QR code phishing, widely known as “quishing,” has reached record levels as threat actors increasingly conceal malicious URLs within scannable…
QR-code phishing, commonly known as quishing, is evolving beyond image-based payloads. Threat actors are now rendering scannable QR codes directly…
A recent router-level DNS change is gaining attention as a method to reduce exposure to phishing pages and malware across…