Fraudulent job advertisements promising easy income and remote work continue to flood social media platforms, particularly across the Middle East and North Africa. Disguised as no-experience side gigs, these schemes are designed to harvest...
Within cybercriminal circles, interest in recruiting insiders from within companies is surging. Rather than mounting complex external intrusions, attackers are increasingly betting on internal sources—employees willing, for a price, to grant access to corporate...
Researchers at Gen have reported a new WhatsApp account-takeover technique dubbed GhostPairing. The attack appears mundane and arouses little suspicion, yet it ultimately grants attackers full access to a victim’s chats, media files, and...
A scheme is gaining momentum worldwide in which doxers impersonate police officers and use so-called “emergency requests” to coerce major companies into disclosing private personal data within minutes. On September 4, for example, an...
A new technique dubbed “ConsentFix” expands upon the already known ClickFix social engineering attack, enabling the hijacking of Microsoft accounts without passwords or multi-factor authentication. To achieve this, attackers exploit the legitimate Azure CLI...
Researcher ZachXBT has stated that a British national implicated in the major $243 million cryptocurrency breach involving lender Genesis may have been detained in Dubai. According to him, the individual in question is known...
Malefactors are increasingly exploiting photographs and video clips sourced from open platforms, presenting them as “evidence” of an alleged kidnapping. The FBI warns that criminals alter publicly available images to make them closely resemble...
The new malicious distribution tool GhostFrame has spread with remarkable speed throughout the cybercriminal ecosystem, becoming the source of more than one million phishing attacks. Its emergence has drawn the close attention of security...
A joint investigation by BCA LTD, NorthScan, and ANY.RUN has revealed, in real time, one of North Korea’s most covert cyber-operations. The team managed, under the guise of an ordinary hiring process, to track...
Digital calendars have long been a convenient way to stay organized amid daily routines, yet new research from Bitsight reveals that this familiar tool can be transformed into a fully fledged attack vector. Bitsight...