Sunday, October 18, 2026

Phishing

Hackers Exploit SniperDz PhaaS for Brand Spoofing and Browser Hijacking

A wave of phishing campaigns across the Middle East and North Africa exposes a sophisticated, centralized fraud ecosystem operating under the SniperDz banner. What...

Tax Phishing Emails Deliver In-Memory Malware to Windows Systems

Cybercriminals are leveraging tax-themed phishing emails to deploy sophisticated in-memory malware on Windows systems, bypassing traditional disk-based detection mechanisms. The attack cascade begins when...

OpenClaw AI Agent Leaks Credentials in Phishing Simulation

Autonomous email agents can become high‑impact phishing victims, leaking cloud credentials and sensitive business data even when wrapped in explicit safety instructions. In a...

New BitB Phishing Attack Targets Microsoft 365 Logins

A new Browser-in-the-Browser (BitB) phishing campaign is abusing fake OAuth login windows to steal Microsoft 365 credentials, and its design is polished enough to...

Hackers Exploit ChatGPT, Claude, DeepSeek Brands in Credential Phishing Attacks

Threat actors are increasingly weaponizing the global fascination with large language models and generative AI by impersonating major AI brands ChatGPT, Anthropic’s Claude, DeepSeek,...

Hackers Exploit 2026 FIFA World Cup With Phishing and Ticket Scams

Cybercriminals are already turning the 2026 FIFA World Cup into a fraud opportunity, using phishing pages, fake online stores, and ticket scams to steal...

Phishing Attacks Pivot to Infostealer Malware Over Fake Login Pages

Cybercriminal tactics are evolving as phishing campaigns increasingly shift away from fake login pages toward infostealer malware designed to quietly harvest sensitive data from...

Kali365 PhaaS Expands to Okta, MAX Messenger Attacks

The Kali365 phishing-as-a-service (PhaaS) platform has significantly expanded its operational scope, moving beyond Microsoft 365 token theft to target Okta single sign-on (SSO) environments...