Phishing

Lampion Malware Targets Portuguese Users With Multistage Phishing and 750MB RAT Payload

A highly targeted Lampion malware campaign abusing localized phishing lures to compromise users in Portugal. The activity reflects a continued…

3 months ago

Police Dismantle Kratos Phishing-as-a-Service Platform and Take Down Over 200 Servers

Authorities from Germany, the United States, and Indonesia have dismantled the central infrastructure of Kratos, a major phishing-as-a-service (PhaaS) platform…

3 months ago

Iran-Linked APT42 Uses AI-Assisted Phishing and TAMECAT Backdoor to Target Defense Officials

Iran-linked APT42 is escalating its espionage operations with AI-assisted phishing and an expanded TAMECAT backdoor, enabling long-lived access to defense…

3 months ago

Kratos PhaaS Targets Microsoft 365 Users With SharePoint Links and Cloudflare Anti-Bot Checks

Kratos, a subscription-based phishing-as-a-service platform, is targeting Microsoft 365 users in the United States, Europe, and other regions through campaigns…

3 months ago

Cybercriminals Target Turkish Banks With 8,400 Phishing Domains and 6,600 Scam Ads

Cybercriminals are operating an industrial-scale fraud ecosystem targeting Turkey’s financial sector, using more than 8,400 phishing domains, thousands of social…

3 months ago

SNOW Malware Ecosystem Uses Teams Phishing, WebSocket Tunnels, and Browser Extensions

Threat actors are increasingly chaining classic phishing with collaboration platforms and covert tunneling to create highly believable intrusion paths. A…

3 months ago

Indian Income Tax Department Phishing Lure Deploys Gh0st RAT and AsyncRAT Implants

A targeted phishing campaign impersonating the Indian Income Tax Department has been observed delivering a sophisticated, six-stage infection chain that…

3 months ago

Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign

A targeted spear-phishing campaign that configures AnyDesk for silent, persistent remote access and exfiltrates its configuration using the Blat SMTP…

3 months ago

Fake Interview Phishing Campaign Impersonates Top Brands to Steal Gmail Credentials

A sophisticated interview-themed phishing campaign that impersonates major global brands to harvest Gmail credentials. Attackers pose as recruiters offering marketing…

3 months ago

FIFA World Cup Phishing Scam Uses Fake Reward Pages to Steal Credit Card Data

A sophisticated email phishing campaign exploiting the global excitement around the 2026 FIFA World Cup is deceiving fans with counterfeit…

3 months ago