Tag: Credential Theft
Microsoft 365 accounts hijacked through compromised hotel Wi-Fi gateways
Threat actors compromised captive Wi-Fi gateways at hotels to silently redirect business travelers to fake Microsoft 365 login pages.
BlackFog dissects MedusaHVNC malware that hides entire browser sessions from victims
BlackFog researchers dissect MedusaHVNC, a remote access trojan that exploits Windows hidden desktops to hijack browser sessions and evade detection.
ClickLock macOS stealer kills apps every 210ms until victims give up password
A new infostealer called ClickLock holds macOS desktops hostage by repeatedly killing applications until the user types their login password.
Massive AUR Package Hijack Campaign Spreads Cryptominer and eBPF Rootkit
Attackers hijacked over 400 abandoned Arch Linux AUR packages by modifying build scripts to deploy a Rust credential stealer and…
Attackers Abuse CAPTCHA and ClickFix Tactics to Boost Credential Theft Campaigns
Microsoft tracked 8.3 billion email-based phishing threats in Q1 2026 as CAPTCHA-gated attacks more than doubled in March, hitting 11.9…
Over 30,000 Facebook Accounts Compromised in Google AppSheet Phishing Attack
Attackers exploited Google's legitimate no-code AppSheet platform to create and host fake login pages, evading traditional security filters and stealing…
Malicious Ruby Gems and Go Modules Target CI Pipelines for Credential Theft
Attackers are exploiting automated CI build processes by embedding credential-harvesting code into fake updates of widely-used open source packages.
PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials
The compromise cascaded from PyPI to npm to Packagist when a transitive dependency of pyannote-audio introduced the malicious Lightning package…