Sunday, October 18, 2026

Phishing

Phishing Campaigns Exploit RCS and iMessage to Evade SMS Security Filters

Phishing campaigns are entering a new phase as attackers abandon traditional SMS delivery and static credential theft in favor of encrypted messaging channels and...

World Cup Phishing Surge: 203 Malicious IPs Detected

The scale of phishing activity targeting the 2026 FIFA World Cup has expanded dramatically, with new research revealing a far broader and more complex...

Fake Invitation Phishing Campaign Steals Credentials From U.S. Organizations

A large-scale phishing campaign leveraging fake event invitations is actively targeting U.S. organizations, combining credential theft, OTP interception, and remote access tool abuse into...

Indian Student Data Weaponized in Phishing and Financial Fraud Campaigns

A growing trend in India where student data is increasingly being exploited for cybercrime activities, including phishing, impersonation, social engineering, and financial fraud. As...

Gamaredon Deploys GammaDrop, GammaLoad in Phishing Campaigns

Gamaredon Uses GammaDrop and GammaLoad Downloaders in Multi-Stage Phishing Attacks. A sustained cyber-espionage campaign linked to the Gamaredon threat group is actively targeting Ukrainian government...

Tycoon 2FA Operators Use OAuth Device Code Phishing to Bypass MFA

A new phishing campaign uncovered in late April 2026 shows how threat actors behind the Tycoon 2FA Phishing-as-a-Service (PhaaS) kit are evolving beyond traditional...

Threat Actors Abuse Vercel AI Tools to Mass-Produce Realistic Phishing Sites

Threat actors are rapidly adopting generative AI platforms to scale phishing operations, and Vercel has emerged as a powerful enabler in this shift. Vercel...

Cybercriminals Exploit Microsoft Teams to Phish Login Credentials and Bypass MFA

Iranian state-sponsored threat actors linked to MuddyWater (Seedworm) have been caught hiding behind the Chaos ransomware brand to conduct sophisticated espionage operations, using Microsoft...