Cybercriminals have developed PhishWP, a malicious WordPress plugin, to facilitate sophisticated phishing attacks, which enable attackers to create convincing replicas…
A phishing campaign spoofing the United States Social Security Administration emerged in September 2024, delivering emails with embedded links to…
NodeStealer, initially a JavaScript-based malware, has evolved into a more sophisticated Python-based threat that targets Facebook Ads Manager accounts, stealing…
Researchers identified FUNNULL, a Chinese CDN, as hosting malicious content, which includes fake trading apps for financial fraud, gambling sites…
In today's interconnected world, where digital communication and transactions dominate, phishing attacks have become an ever-present threat. By masquerading as…
SilkSpecter, a Chinese financially motivated threat actor, launched a sophisticated phishing campaign targeting e-commerce shoppers in Europe and the USA…
The Phish, 'n' Ships fraud operation leverages, compromised websites to redirect users to fake online stores, which, optimized for search…
The attackers use a multi-stage attack, starting with a malicious LNK file disguised as a healthcare-related document. This file, likely…
Callback phishing is a two-step attack involving phishing emails and phone calls. Victims are lured into calling a bogus number…
Researchers observed two distinct instances where users were inadvertently led to malicious websites after conducting Google searches for video streaming…