Tag: Phishing
Microsoft 365 accounts hijacked through compromised hotel Wi-Fi gateways
Threat actors compromised captive Wi-Fi gateways at hotels to silently redirect business travelers to fake Microsoft 365 login pages.
ChatGPT AgentForger bug lets phishing links deploy rogue workspace agents
A vulnerability in OpenAI's ChatGPT workspace agent system could let attackers deploy malicious agents through a single phishing link.
Three-country police action dismantles Kratos phishing-as-a-service empire
German and US law enforcement seized 200 servers and arrested the alleged developer of the Kratos phishing platform in Indonesia.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.
Helix Extortion Group Targets SharePoint with Vishing and Device Code Tactics
The Helix group uses vishing and device code phishing to break into SharePoint, then exfiltrates data for extortion or sale.
Phone Phishers Use Passkey Enrollment to Seize Microsoft Accounts
A live operator phone phishing campaign exploits Microsoft Entra passkey enrollment to plant persistent account access, bypassing MFA with real…
Law Enforcement Dismantles AI Driven Phishing Network Tied to 3.8 Million Stolen Credit Cards
The FBI and partners seized servers, a Telegram bot, and cryptocurrency wallets, while redirecting thousands of phishing domains to a…
Attackers Abuse CAPTCHA and ClickFix Tactics to Boost Credential Theft Campaigns
Microsoft tracked 8.3 billion email-based phishing threats in Q1 2026 as CAPTCHA-gated attacks more than doubled in March, hitting 11.9…