Fake Calendly Interviews Steal Facebook and Google Logins
Fake Meta Careers booking pages relay Facebook codes and Google approvals. Learn where the interview flow changes into an account takeover.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
November 13, 2026
Latest reports
GitPower Uses Fake Conference Invitations to Target Ukrainian Experts
Genians links fake conference invitations to GitPower attacks on Ukrainian experts. A PDF-looking shortcut launches scripts while a real document opens.
YMCO Fake Jobs Turned Personal Bank Accounts Into a Cash-Out Service
Korniev’s guilty plea exposes how YMCO recruited job seekers to forward stolen bank funds. The warning sign was the work: using a personal account.
FBI Seizes Microscan and FishHub Domains Behind File-Theft Operations
FBI seizures expose how Microscan hid scans behind infected devices and FishHub delivered file-stealing malware. Blocking domains does not clean victim networks.
Fake Offline Maps Lead Android Users to a Telegram App Trap
Cyberpolice warns that free navigator ads lead through Telegram to a malicious app. Check installation access and separate phone cleanup from bank recovery.
MATCHBOIL Hides a Backdoor Behind a Fake Planner
ESET traces MATCHBOIL’s fake planner, hidden execution mode and two-minute callbacks in Ukraine. Why a normal-looking window cannot clear a suspicious download.
Noir Wallet Drainer Uses DNS to Keep Fake Crypto Pages Working
Infoblox traces Noir’s wallet-permission trap and DNS backend rotation. Why connecting, signing and disconnecting a wallet mean different things.
Fake Event Invitations Turn QR Codes Into Google Phishing
Talos traces real event details, altered poster QR codes and a live Google sign-in relay. Verify the invitation’s destination before entering account data.
NEBULA: Fake AI SDKs Install a Hidden Windows RAT
CloudSEK links seven fake npm AI SDKs to a Windows RAT. The install hook, not the apparent client, drops a console-host lookalike before import.