#фишинг
-
Sony ISP subsidiary breach exposes about 2.5 million customer records
Sony Network Communications has confirmed that attackers accessed its So-net member database, exposing 2.58 million records with personal data of current and former customers.
-
Global takedown dismantles network behind a billion phishing messages
Law enforcement and tech companies worldwide disrupted a sprawling cybercriminal ecosystem that targeted over 75,000 organizations across 150 countries.
-
TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A China-aligned cyber espionage crew is impersonating economists, policymakers and even an Anthropic employee to steal the credentials of experts shaping U.S. AI regulation.
-
Danish university DTU breach exposes data of up to 200,000 people
The Technical University of Denmark says attackers broke into its DTUBasen identity system and downloaded information spanning nearly two decades.
-
A fake gig and a git hook: an attempt to steal developer credentials
REVSYS founder Frank Wiles describes how a supposed client tried to run arbitrary code on his laptop through an innocent-looking git repository.
-
CSuite Phishing Targets US Firms, Steals Microsoft 365 Sessions and Plants RMM Tools
ANY.RUN researchers detailed a US-focused phishing campaign called CSuite that pairs Microsoft 365 session theft with the deployment of legitimate remote-access tools.
-
A documentation placeholder domain now serves ClickFix attacks
The third-party.com domain, used for years as a generic placeholder in developer docs and code samples, now shows a fake Cloudflare check that nudges Windows users into running malicious PowerShell.
-
Revolut confirms customer data breach caused by fake requests impersonating a government body
Fraudsters sent requests from a legitimate government-agency domain and obtained the personal data of some of the fintech company's customers. Revolut said its systems and users' funds were unaffected.
-
Passkey-Themed Phishing: How Data Is Stolen from Microsoft 365
Microsoft is tracking a wave of attacks in which ransomware groups use the pretext of an “urgent passkey update” to coax access out of corporate accounts and methodically siphon data from the cloud.
-
ClickFix: How a Fake CAPTCHA Tricks Victims into Infecting Their Own Computers
ClickFix attacks have gone from an exotic rarity to a mass phenomenon: PC and Mac users are being tricked into running malicious commands themselves. Even pro-Kremlin hacking groups have taken up the technique.
-
Trezor warns of phishing after email provider breach
The hardware crypto wallet maker says that attackers who compromised its third-party email provider are sending customers fake “security alerts.”
-
BigBear 2.0: Phishing Service Bypassed MFA at 258 Organizations
The phishing-as-a-service platform BigBear 2.0 intercepted more than 5,000 Microsoft 365 credentials, bypassing multi-factor authentication with an adversary-in-the-middle attack.
-
39 Ways to Bypass Passkeys Without Breaking FIDO2 Cryptography
Researchers have documented at least 39 methods for compromising passkey-based authentication. None of them requires breaking the cryptography—they attack everything around it.
-
Russian Extradited to U.S. Over Malicious Excel Files Sent to 80,000 Freelancers
The U.S. Justice Department accuses Searzhudin Aktulaev, a 40-year-old extradited from Cyprus, of a 2016–2017 campaign: using 255 fake accounts, he sent out infected Excel spreadsheets that installed remote-access trojans.
-
HOOKEDGE: How APT28 Hides Espionage in Free Webhooks
Researchers at Recorded Future have detailed a new backdoor from the Russian group APT28 that has targeted diplomats in Romania, Spain and Turkey and disguises its command-and-control as ordinary network traffic.
-
AI agent “Alice from Apple Support” tricks theft victims into handing over their device passwords
Researchers at SOCRadar have detailed the AnonyMousKIT platform — a “phishing as a service” operation that uses rented AI voice agents to call the owners of stolen iPhones in Apple's name and coax out their passcode, Apple ID credentials and one-time 2FA code.
-
Russian Hackers Hijack Accounts via Google OAuth and WhatsApp Device Linking
Google Threat Intelligence Group has profiled three clusters of suspected Russian cyberespionage that abuse legitimate authentication mechanisms to seize the personal accounts of diplomats, academics and defense specialists.
-
SafePal Data Breach: Nearly 40,000 Customers Affected
SafePal, a maker of hardware crypto wallets, has disclosed a breach affecting 39,798 customers. The stolen order data is already up for sale on a cybercrime forum.
-
Trezor Data Breach: Nearly 14,000 Customers Affected by a Hack of Its Logistics Partner
Trezor, the maker of hardware cryptocurrency wallets, has reported a leak of customers' personal data following a breach at its shipping contractor, ShipMonk. The devices themselves and the company's systems were unaffected.
-
Delta Flight Passengers Suspected of “Evil Twin” Attack After DEF CON
A fake Wi-Fi network with a phishing page appeared aboard a Delta flight from Las Vegas to Atlanta. The FBI is looking into the incident, which happened the day after the DEF CON hacking conference.
- More