Tag: Account Takeover
Japanese Police Arrest Teenager For AI-Assisted Attack On Anime Streaming Platform
A 15-year-old Japanese student used a ChatGPT-assisted program to cancel over 46,800 accounts on Bandai Channel, forcing a month-long service…
New PhishingKit Exploits Browser Side Decryption to Hide Microsoft 365 Account Takeover
The EvilTokens phishing kit encrypts its landing page content with AES GCM to bypass static URL analysis, exploiting Microsoft's device…
Cybercriminals Exploit FIFA 2026 Hype with Lookalike Domains and Account Takeovers
A coordinated phishing campaign using over 300 cloned FIFA sites is targeting fans ahead of the 2026 World Cup, aiming…
Forgotten Debug Flag in Microsoft 365 Android Apps Exposed Account Tokens to Any App
An overlooked debug flag in six Microsoft 365 Android apps allowed any untrusted app on the device to silently steal…
Account Hijackers Weaponized Meta AI Chatbot to Steal Instagram Handles
Threat actors manipulated Meta's AI assistant on Instagram to reset passwords and steal premium account handles, selling them on Telegram…
WordPress Plugin Flaw Lets Attackers Take Over Sites via Admin Creation
Attackers are exploiting a privilege escalation bug in the WP Maps Pro WordPress plugin to create unauthorized administrator accounts on…
Silent Account Hijack Exploits iOS 16 Image Flaw to Take Over WhatsApp
A zero click attack exploits two vulnerabilities to silently hijack WhatsApp accounts on iOS 16 devices, leaving no trace in…
Event Lure Phishing Operation Poses as Invitations to Steal Credentials
A phishing operation using fake event invitations and a repeatable automated framework has been targeting U.S. education, banking, government, technology,…