Tag: Phishing
A single shared IP fronted 1,200 lookalike shopping domains
Akamai found replacement storefronts appearing hours after takedowns, rebuilt from reused kits and payment pages that harvest card details.
Stolen school logins are hopping between districts by email
MS-ISAC flagged leaked credentials at 808 K-12 organisations and traced attacks spreading through genuine staff mailboxes.
Device codes turn a shared document into a token theft
A phishing kit is walking US manufacturers past single sign-on without ever collecting a password.
Forged conference invites feed a Google credential relay aimed at Taiwan analysts
Cisco Talos says the UAT-11985 emails share one syntactic skeleton, with swapped QR posters pulling victims into a live adversary-in-the-middle…
CikaBika RAT hides its command channel inside Discord
A Rust-based remote access trojan delivered through document lures is using Discord as its control panel, Darktrace reports.
Microsoft dismantles a Chinese phishing market that sent a billion messages
A court order let Microsoft and Health-ISAC seize the infrastructure behind YAM Store, CoGUI, and Iron Man.
Two odd characters let attackers fake trusted web addresses
Researchers registered 20 lookalike domains that Chrome and Edge display as the genuine article.
Attackers stack two remote-access tools to keep a foothold on Windows
Microsoft traced phishing emails that drop one remote tool, then install a second, redundant one.