ASCII Smuggling Phishing: What to Do With a Funding Email
Invisible characters can hide financial lure words from simple filters. Verify the…
PackClient RAT: A Tax Notice Can Leave Persistent Access
PackClient tax lures deliver a Windows RAT with a restart guard. Check…
Manchester Airport Breach: Verify Parking Payment Requests
MAG bookings remain valid after its data breach. Verify parking payments, refunds…
ReliaQuest Phishing: MFA Approved, Application Access Blocked
ReliaQuest says device trust blocked applications after a password and MFA approval…
Google Calendar Phishing: Fake DocuSign Leads to Remote Access
A real Google Calendar invite can hide a fake DocuSign viewer. Learn…
MyChart Phishing Scam Uses Fake Results and Medicare Kits
Fake MyChart messages use lab results or a Medicare kit to steal…
Post-DEF CON Google Doc Phishing Delivers AMOS and NetSupport
A real Google Doc sidebar and fake DocSend installer delivered AMOS and…
IDScan.net Breach Investigation: What to Do About ID Scans
The FBI is investigating reports of stolen ID scans. What remains unconfirmed,…
iAuthFlow v2 Adds a Rogue Google Passkey That Survives Reset
iAuthFlow v2 can add an attacker-controlled Google passkey after a relayed phishing…
Agent Tesla Malware Hides in Emoji-Obfuscated JScript
A fake SWIFT payment email uses emoji-obfuscated JScript to run Agent Tesla…
Superior: 19 Browser Extensions Steal Wallets and Passwords
The Superior campaign weaponized 19 Chrome and Edge extensions to steal crypto,…
SynkLoader Malware Uses a Fake Windows Lock Screen to Steal Passwords
SynkLoader arrives through fake Teams help-desk chats, steals Windows passwords with PhishLocker,…