Tag: phishing
236,000 DCloud Uni-App Sites Fueling Crypto Scams and Phishing Campaigns
Infoblox researchers have identified over 236,000 websites built on a legitimate Chinese open-source framework that are being weaponized for investment scams, pig-butchering…
Android Expands AI Scam Detection to Samsung Devices and 20+ Countries
Google is rolling out Gemini-powered call and message scam detection to Samsung Galaxy S26 hardware and expanding messaging protections to more than…
Microsoft Teams Becomes Prime Vector for IT Impersonation Phishing
Threat actors including APT29 are exploiting overly permissive Teams federation settings to impersonate IT staff and trick employees into approving MFA prompts.…
Scattered Spider Members Plead Guilty on Day One of UK Trial
Two key members of the Scattered Spider cybercrime group admitted to hacking Transport for London and conspiring in a series of ransomware…
Phishing Campaign Hits Hotels in Europe and Asia with Node.js Implant
Microsoft has flagged an active phishing operation targeting hospitality organizations since April 2026, delivering a Node.js-based implant through photo-themed ZIP file lures.
Polymarket Hit by Supply Chain Attack, $3 Million in Crypto Stolen
A compromised third-party vendor injected a malicious script into Polymarket's frontend, enabling attackers to steal roughly $3 million from at least 11…
Russian Intelligence Actors Evolve Signal Phishing to Steal Backup Recovery Keys
A campaign attributed to Russian Intelligence Services has expanded beyond account hijacking to trick high-value targets into surrendering their Signal Backup Recovery…
Uni-App Framework Underpins 236,000 Investment Scam Domains
Researchers at Infoblox have traced more than 236,000 scam-related second-level domains to a shared infrastructure built on the Chinese open-source framework Uni-App,…
Russia-Linked Campaign Targeted Messaging Accounts of Officials Across Three Countries
The SSU and FBI have jointly exposed a sustained Russian intelligence operation that used fraudulent support messages to compromise the messaging accounts…