Tag: phishing
756 articles
Microsoft Disrupts Global Phishing Network Behind 1 Billion Messages
Microsoft and Japanese police have joined forces to take down a notorious phishing network, known as Yam Store or Storm-3119, that was responsible for a staggering 1 billion phishing emails and texts sent to over 75,000 organizations since January 2026. This underground marketplace was selling compromised accounts, licenses, and storage to threat actors, fueling a massive wave of cyber scams.
Law Enforcement Disrupts Phishing Network Behind 1 Billion Malicious Messages
A massive phishing network responsible for sending over 1 billion malicious messages to 75,000 organizations in 150 countries has been disrupted by law enforcement, bringing relief to countless individuals and businesses worldwide. This enormous operation had been targeting victims with sophisticated device-code phishing scams, with over 750 million messages aimed specifically at Microsoft customers.
Microsoft Teams Targeted in IT Support Impersonation Schemes
Beware of scammers impersonating IT support on Microsoft Teams - a recent study found that 1 in 990 external contacts showed signs of impersonation, with 30% of organizations encountering at least one such contact in the first half of 2026. Attackers are now using Teams as a primary tactic to gain access, marking a shift towards more interactive and deceptive methods.
FBI Disrupts Chinese Hacking Tools, Warns of PRC Spies Targeting Global Networks
The FBI has struck a blow against Chinese hackers, seizing seven web domains linked to a suite of hacking tools, including the notorious FishHub malware, which was used to target global networks, including roughly 20 Taiwanese universities. This malware was designed to facilitate phishing activity, allowing hackers to gain a foothold in vulnerable systems.
GenAI Fuels Phishing Evolution, Prompting New Security Countermeasures
Thanks to AI, phishing emails have become a whole lot harder to spot - gone are the telltale signs of poor grammar and misspelt words, replaced with slick, error-free language that's almost indistinguishable from the real thing. Phishing has evolved into a massive threat, with the FBI reporting a 274% surge in losses over just two years.
Wazza Phishkit Targets US, EU, Australia with Multi-Stage Routing
Meet Wazza Phishkit, a sophisticated threat that's targeting banking, manufacturing, and government organizations across the US, Europe, and Australia with a multi-stage routing chain designed to evade detection. This engineered delivery system uses a series of checks to route visitors to its final lure, making it a complex and formidable phishing threat.
Phishing Sites Impersonate AI Chatbots to Capture Credentials
Scammers are now using a sneaky new tactic, impersonating popular AI chatbots like ChatGPT and Gemini to trick you into handing over your login credentials and multi-factor authentication codes. They're using a clever browser-in-the-browser technique to create fake sign-in windows that look legit, but can steal your info in real time.
Cybersecurity Events Surge to 2,514 per Second
The astonishing truth is that a whopping 2,514 cybersecurity events occur every single second, according to the Comcast Business 2026 Cybersecurity Threat Report, which analyzed a massive 79.3 billion events over just 12 months.
Phishing Sites Impersonate AI Tools to Steal Ad Accounts, MFA Codes
Scammers are now using fake AI tools to trick victims into handing over their ad accounts and multi-factor authentication codes, with one phishing campaign gathering hundreds of victim submissions. They're getting clever with a technique called browser-in-the-browser, creating fake login prompts that look legit and are almost impossible to spot.
Nikkei Exposes Employee Cloud Account Breaches
Nikkei revealed that around 9,000 phishing emails were sent from a hijacked Microsoft 365 mailbox, adding to a string of account breaches that exposed sensitive employee and partner contact data. The breaches, which started with a Google Workspace account hack in late July, affected over 1,646 individuals, with compromised info including names and email addresses.
UK Police Urge Passkey Adoption Amid 425% Surge in Hacking Profits
Hackers are raking in a whopping 425% more profits, with cybercrime linked to email and social media hacking hitting £6.3m in 2025/6 - and experts warn it's time to ditch passwords for good and switch to passkeys to protect yourself. The UK's Report Fraud service is sounding the alarm and launching a public campaign to help you safeguard your online life.
Nikkei Breaches Email Accounts, Exposes Data
Nikkei suffered not one, but two email breaches in just three months, exposing sensitive contact info and leaving staff and interviewees vulnerable to phishing scams. The hacks, which hit Google Workspace and Microsoft 365 accounts, allowed attackers to send thousands of malicious emails.
China-linked hackers impersonate US officials to target AI experts
Phishing campaigns impersonating US officials are targeting top AI policy experts, making it tough for them to know if they're being scammed. Even prominent figures like Lynne Parker have had their names used to trick others, highlighting the challenge of stopping these attacks.
Financial Firms' Software Supply Chain Vulnerability Backlog Reaches Crisis Point
The financial services sector is facing a crisis point as a massive backlog of software supply chain vulnerabilities has finally caught up with it, with exploitation now overtaking phishing as the top breach threat. For years, firms tolerated this risk due to legacy systems, regulatory pressures, and the need for ultra-reliability, but attackers have changed the game.
England's Schools Bolster Cyber Resilience
England's secondary schools are getting better at fending off cyber threats, with a significant drop in reported incidents - but the real test is in recovering quickly when attacks do happen. A recent Ofqual survey shows 27% of schools reported a cybersecurity incident in 2025/26, down from 34% in 2023/24.
CSuite Phishing Targets US Businesses with Dual Microsoft 365, RMM Attacks
US businesses are in the crosshairs of a cunning phishing attack that combines Microsoft 365 session theft with remote-access tool deployment, allowing hackers to turn a single incident into widespread account compromise, fraud, and persistent system access. This dual-threat attack path puts companies at risk of devastating breaches.
Star Blizzard Exploits Fake Invites to Deploy Windows Backdoor
Over 100 organizations, primarily in the US and UK, have fallen prey to a sophisticated phishing scam that uses fake event invites to install a sneaky Windows backdoor, with Microsoft tracing the attacks back to a Russian hacking group. The campaign, which has been running in waves since January, appears to be targeting individuals and organizations with ties to Ukraine.
US Air Force Veterans Sentenced for Orchestrating BEC Scams
Two US Air Force veterans orchestrated a brazen multi-year scheme that scammed over $1.68 million from a victim in Iowa City, using a complex web of domestic and international co-conspirators to divert funds into their control.
Researchers Intercept AliExpress Phishing Domains Before Activation
EfficientIP Research Labs swooped in to stop a phishing scam, intercepting 10 AliExpress domains before they could be used to trick unsuspecting victims. The domains, tracked from June 9 to July 2, were part of a sophisticated phishing operation that was thankfully shut down before activation.
ASUS eShop Breach Exposes Customer Order Data
ASUS alerted customers that its online store was hacked, allowing an intruder to access sensitive order data, including contact details and order records, potentially putting them at risk of scam messages. The company has launched an investigation and notified affected customers by email.
RemControl Malware Targets European, Canadian Banking Users
Beware of a sneaky new Android malware called RemControl that's targeting banking users in Europe and Canada through clever phishing tactics and fake Google Play pages. This malware-as-a-service platform is spreading rapidly through fake stores, malicious ads, and tracking pixels.
Chinese Hackers Exploit Chrome-Windows Zero-Days to Deploy CLEANGULP Malware
Chinese hackers masqueraded as reputable media organizations and NGOs, using convincing phishing messages and fake sites to deploy the CLEANGULP malware, with one recent campaign targeting Asian government entities over support for a Hong Kong activist. They sent spoofed emails that appeared to be from the Center for American Progress, complete with links to suspicious domains.
Microsoft Disrupts EvilTokens Cybercrime Service
Microsoft and its partners have successfully dismantled the EvilTokens cybercrime service, seizing 50 websites and disabling over 175 domains used to target and exploit victims. This disruption was made possible through a powerful collaboration with industry leaders, including Cloudflare, OpenAI, and Coinbase, to protect potential victims and take down the operation.
RatHat Malware Exploits AI to Automate Android Device Control
Meet RatHat, a sneaky new Android malware that uses AI to take control of your device, navigating and interacting with it in real-time - making it a formidable foe for security software. This clever malware is spread through cleverly disguised ads, texts, and fake websites, and may even have ties to Chinese threat actors.