-
AI Brand Impersonation Targets Meta Business Accounts Through Malicious Mobile Apps
By Hiwot · Published June 2, 2026Key Points Over 35k coordinated phishing campaign across April impersonating Google ...
-
OAuth Device Code Phishing Campaigns Surge with EvilTokens Toolkit
By Hiwot · Published May 7, 2026Key Points Over 50,000 device code phishing campaigns observed since March 2026, repr...
-
Amazon Password Reset Callback Campaign Exploits Legitimate Notification Infrastructure: 7 April 202
By Toby Metcalf · Published April 13, 2026Key Points Threat actors sent approximately 67k callback messages across th...
-
Threat Actors Exploit Social Causes to Manipulate User Behavior: 10 February 2026
By Dimakatso Makinta - Moderator · Published February 10, 2026Key Points Phishing campaigns exploiting Pride Month th...
-
XRed Malware Campaign Targets Multinational Organizations : 10 December 2025
By Dimakatso Makinta - Moderator · Published December 18, 2025Key Points Malware campaign impersonating the Indian Mi...
-
Holiday Party Invitations Deliver Remote Access Tools : 5 December 2025
By Dimakatso Makinta - Moderator · Published December 18, 2025Key PointsThreat actors are leveraging the holiday seas...
-
Holiday Party Invitations Deliver Remote Access Tools : 5 December 2025
By Dimakatso Makinta - Moderator · Published December 10, 2025Key PointsThreat actors are leveraging the holiday seas...
-
HR Bonus-Themed QR Code Phishing Campaign Exploiting Year-End Corporate Processes : 21 November 2025
By Dimakatso Makinta - Moderator · Published November 24, 2025Key PointsThreat Type: Credential harvesting via QR cod...
-
New Employee Phishing Campaign Targets Microsoft 365 Credentials : 05 November 2025
By Dimakatso Makinta - Moderator · Published November 5, 2025Key Points Credential harvesting campaign impersonating ...
-
Services Australia Impersonation Drives Year-Round Credential Theft Operation : 17 October 2025
By Dimakatso Makinta - Moderator · Published October 20, 2025Key PointsMCTO3001 - Threat operation with Services Aust...
-
Conflict-Themed Social Engineering Distributes RATs Across Eastern Europe : 17 October 2025
By Dimakatso Makinta - Moderator · Published October 20, 2025Key PointsMCTO1025 also referred to as UCA- 0050 a cyber...
-
SharePoint File Sharing Abuse with CAPTCHA Evasion : 17 October 2025
By Dimakatso Makinta - Moderator · Published October 20, 2025Key Points Threat actors exploiting SharePoint file shar...
-
HR-Themed campaign Shifts from Credentials to RMM Tools : 17 October 2025
By Dimakatso Makinta - Moderator · Published October 20, 2025Key PointsLong-running credential harvesting operation c...
-
Common Social Engineering Lures Used to Deploy Remote Monitoring Management Tools for Initial Access
By Dimakatso Makinta - Moderator · Published October 14, 202510 October 2025Key PointsContinued shift from traditiona...
-
Continuous Phishing Operations targeting developers and NPM ecosystem. : 03 October 2025
By Dimakatso Makinta - Moderator · Published October 6, 2025Key PointsTwo major npm-focused campaigns identified as p...
-
Callback Scam Campaigns Impersonating Major Australian Banks : 24 September 2025
By Dimakatso Makinta - Moderator · Published September 25, 2025Key Points70,000+ detections of callback scam campaign...
-
Hospitality-Focused Phishing Campaign Impersonates Expedia and Cloudbeds : 8 September 2025
By Dimakatso Makinta - Moderator · Published September 8, 2025Key PointsLarge-scale credential harvesting campaign ta...
-
ScreenConnect Super Admin Credential Harvesting : 25 August 2025
By Dimakatso Makinta - Moderator · Published September 2, 2025Key PointsLow-volume spear phishing operation sending u...
-
Awardco Employee Rewards Platform Phishing Campaign : 18 August 2025
By Dimakatso Makinta - Moderator · Published August 18, 2025Key PointsMulti-month campaign impersonating Awardco empl...
-
UK Home Office Phishing Campaign Targeting Visa Sponsor Licence Holders : 12 August 2025
By Dimakatso Makinta - Moderator · Published August 14, 2025Key PointsPhishing campaign targeting UK sponsor licence ...
-
BEC Campaign Using AI Generated Fake Email Threads. : 11 August 2025
By Dimakatso Makinta - Moderator · Published August 11, 2025Key PointsLarge-scale BEC invoice fraud campaign targets ...
-
Direct Send Abuse : 6 August 2025
By Dimakatso Makinta - Moderator · Published August 7, 2025Key PointsThreat actors are actively exploiting Microsoft ...
-
Grandoreiro Infostealer Campaign : 4 August 2025
By Dimakatso Makinta - Moderator · Published August 4, 2025Key PointsThe Grandoreiro banking trojan targets financial...
-
HTML Tag Obfuscation : 21 July 2025
By Dimakatso Makinta - Moderator · Published July 23, 2025Key PointsThreat actors utilizing HTML tag obfuscation to e...
-
Sextortion scams using invoicing and accounting services for distribution : 14 July 2025
By Dimakatso Makinta - Moderator · Published July 15, 2025Key PointsSextortion scams distributed through online invoi...
-
Astaroth Infostealer Campaign : 16 June 2025
By Dimakatso Makinta - Moderator · Published June 17, 2025Key PointsWhat you'll learn in this notificationInformation...
-
German Tax and Accident Insurance Institution Impersonation : 03 June 2025
By Dimakatso Makinta - Moderator · Published June 3, 2025Key PointsWhat you'll learn in this notificationAttackers ex...
-
Scattered Spider using fake CAPTCHA to evade detection : 22 May 2025
By Dimakatso Makinta - Moderator · Published May 26, 2025Key PointsWhat you'll learn in this notificationMore than 15...
-
OAuth Abuse : 5th May 2025
By Dimakatso Makinta - Moderator · Published May 8, 2025Key PointsWhat you'll learn in this notificationCampaign usin...
-
SVG Attachment Abuse : 31st March 2025
By Dimakatso Makinta - Moderator · Published April 10, 2025Key PointsWhat you'll learn in this notificationCampaign u...