Open Directory Exposes Three Evilginx Phishing Operators
Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA
Articles mapped to MITRE ATT&CK techniques. Select a technique to view matching articles.
351 articles found
Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA
Two young men have been arrested in the Netherlands on suspicion of running a phishing operation that harvested the credit card details of unsuspecting victi...
Attacks also used a compromised chatbot in campaign to steal sensitive information from Business Users
The OAuth 2.0 Device Authorization Grant specification was designed to streamline authentication for Smart TVs, IoT devices, and printers.
An inside look at the active Armored Likho APT campaign. The attackers are using spear-phishing, AI-generated loaders, and a new Python-based tool, BusySnake...
Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world
FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing
FortiGuard Labs analyzes a geofenced Ousaban campaign targeting Spain and Portugal with phishing PDFs, steganography, and evasive C2.
A wave of phishing emails sent to Booking.
The FBI claims Russian spies are targeting Signal backup keys
What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email.
GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages
New revelations by Group-IB expose the full scale of the decade-old SniperDz phishing operation
Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyb...
Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing
FortiGuard Labs research shows how cybercriminals are exploiting the demand for the FIFA World Cup 2026 through phishing, fake tickets, malware, impersonatio...
A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site script...