According to researchers at cybersecurity firm Kaspersky, threat actors are abusing Amazon Simple Email Service (SES) to deliver highly convincing…
A newly discovered phishing kit called “Bluekit” is reshaping how cybercriminals run phishing campaigns by combining multiple attack stages into…
Email bombing campaigns combined with fake IT support outreach are driving a surge in sophisticated Microsoft Teams phishing attacks. The…
Cybersecurity researchers have uncovered a massive phishing operation dubbed AccountDumpling that has compromised more than 30,000 Facebook accounts worldwide. Unlike…
Hackers are abusing GitHub’s own issue-notification emails to phish developers and silently take over their repositories using malicious OAuth applications,…
Hackers are shifting away from email phishing and are directly targeting Okta and other identity providers using voice‑based social engineering,…
Hackers are abusing GitHub and Jira’s built‑in notification systems to send phishing emails that appear completely legitimate. Because these emails…
Hackers are increasingly abusing trusted software development platforms GitHub and GitLab to host malware and credential phishing campaigns, making defensive…
A recently observed phishing campaign is abusing Google Cloud Storage to deliver the Remcos remote access trojan (RAT), relying on…
Hackers are weaponizing legitimate Meta Business Manager notifications to sneak phishing emails past security filters and into users' inboxes. By…