Agent Tesla Malware Hides in Emoji-Obfuscated JScript
A fake SWIFT payment email uses emoji-obfuscated JScript to run Agent Tesla…
Superior: 19 Browser Extensions Steal Wallets and Passwords
The Superior campaign weaponized 19 Chrome and Edge extensions to steal crypto,…
SynkLoader Malware Uses a Fake Windows Lock Screen to Steal Passwords
SynkLoader arrives through fake Teams help-desk chats, steals Windows passwords with PhishLocker,…
.vu Phishing Surge Uses 1,660 Domains to Steal Accounts
A .vu phishing operation used 1,660 short-lived domains and AiTM login relays.…
SafePal Data Breach Exposes 39,798 Customer Orders
SafePal says an order-tracking flaw exposed contact, shipping, and purchase data for…
Trezor Data Breach 2026: ShipMonk Scope Grows to About 80,700
The Trezor ShipMonk breach now affects about 80,700 customers. Check whether you…
ChatGPT Payment Reminder Email Scam: Check Billing Safely
A ChatGPT payment reminder may lead to a fake checkout. Check billing…
JWR Phishing Lets Attackers Control Checkout Live
JWR phishing streams card, password, ID, and 2FA input while an operator…
X 2FA Manager Email Scam: “2FA Was Temporarily Paused”
The X 2FA Manager email saying 2FA was temporarily paused is phishing.…
SumUp Transaction Problem Email Scam: Verify It Safely
A SumUp transaction-problem email may be phishing. Verify it outside the message…
SARS Tax Refund Email Scam: Verify Before You Pay
A SARS tax refund email that asks for card or eFiling details…
CSS Email Attacks Can Steal Passwords Without JavaScript
PortSwigger research shows how sanitized CSS in webmail can cross the message…