#фишинг
-
Valve Warns Steam Hardware Buyers of a Breach at Its Logistics Partner
The data of Valve's European customers was stolen after the servers of shipping company CEVA Logistics — which delivers Steam hardware — were hacked. The exposure covers names, addresses and phone numbers, but not payment data.
-
Levi Strauss Says Corporate Data Was Stolen After Attack on Employees
Using social engineering, hackers broke into the work computers of three employees of the jeans maker and stole corporate information. According to the company, customer data was not affected.
-
Phishing Disguised as a COLDCARD Audit Installs a Remote Access Tool
Scammers play on the fears of COLDCARD hardware wallet owners in the wake of an $88.6 million bitcoin theft, convincing victims to install ScreenConnect under the guise of a diagnostic tool.
-
Breach of Britain's PNLD: Police Contacts Leaked to the Dark Web
The UK's Police National Legal Database has confirmed a leak of work contact details for police officers, officials and partners. The data was published on the dark web by the group ExfilSquad.
-
Flying Eagle Android trojan source spreads across Telegram, traces found on 170 servers
Researchers at Hunt.io and NetAskari have found traces of the Flying Eagle remote-access framework on 170 servers — against the backdrop of its source code leaking into criminal Telegram channels.
-
AgentForger: How a Single Phishing Link Turned ChatGPT into an Autonomous Spy Inside a Company
Researchers at Zenity Labs have disclosed a critical vulnerability in ChatGPT's Workspace agents: clicking a single link made it possible to covertly create, authorize and launch a hostile AI agent with an employee's privileges. OpenAI closed the hole on June 8, 2026.
-
Police dismantle the Kratos phishing platform and arrest its developer
Law enforcement in Germany and the US has knocked out the infrastructure of one of the largest phishing services, and its technical administrator has been arrested in Indonesia.
-
North Korean hackers hide malware in SVG flags of fake coding tests
Attackers tied to the Contagious Interview campaign are using steganography in SVG images to conceal a malicious payload inside fake assignments for job seekers. The victims are developers who respond to bogus job openings.
-
MemGhost: An Email Attack That Forges the Memory of AI Agents
Researchers have described the MemGhost attack, in which a single email makes an AI assistant store a false “fact” about the user and quietly alter its answers in future sessions. The victim, meanwhile, receives an ordinary-looking response and has no idea of the substitution.
-
Server Misconfiguration Exposed Three Phishing Campaigns Against Microsoft 365
France's Lexfo uncovered three Evilginx-based phishing operations targeting Microsoft 365 users, thanks to an accidental slip by one of the attackers. The leak was caused by an unsecured web server with directory listing enabled.
-
New Forg365 Phishing Platform Uses AI to Steal Microsoft 365 Accounts
Researchers have uncovered Forg365, a phishing platform that uses AI to generate lures for stealing Microsoft 365 credentials. The service runs on a phishing-as-a-service model and combines several defense-evasion techniques.
-
Google Sues Chinese Scammers Who Used Gemini for Phishing
Google has accused a group called Outsider Enterprise of running phishing-as-a-service through Telegram using the Gemini AI model. The scammers built fake sites impersonating Google, YouTube and government agencies.
-
ARToken platform uncovered — an affiliate of the EvilTokens phishing service
Researchers have uncovered a new phishing-as-a-service platform called ARToken, operating as an affiliate of the EvilTokens service. This offered a look inside an extensive toolkit for compromising Microsoft 365 accounts.