Hackers Exploit M365 Direct Send During US Eastern Business Hours in Sophisticated Phishing Campaigns
New KnowBe4 research reveals M365 Direct Send abuse for phishing, targeting US Eastern business hours with advanced social engineering.
SVG Voicemail Phishing: A Deep Dive into a Large-Scale Evasion Campaign Targeting 5,500+ Organizations
Analysis of a large-scale phishing campaign leveraging fake SVG voicemail attachments to bypass email defenses, targeting 5,527 organizations.
FortiBleed: Unpacking the Critical Implications for FortiGate Firewall Security
FortiBleed exposed FortiGate users to widespread compromise. Learn the attack chain, implications, and critical defense strategies.
Microsoft Edge's "By Design" Plaintext Password Vulnerability: A Deep Dive into Memory Resident Credential Risks
Edge loads plaintext passwords into memory at startup, making them vulnerable to theft on compromised systems.
Operation Blockbuster: Unpacking the Malware Campaign Behind 610,000 Roblox Account Breaches
Three arrested for hacking 610,000 Roblox accounts, distributing malware, and selling access on Russian darknet marketplaces.
Vimeo-Themed Phishing Onslaught: Deconstructing the Campaign Targeting SLTT Personal & Banking Data
Deep dive into a Vimeo-themed phishing campaign targeting U.S. SLTTs, analyzing TTPs, data exfiltration, and advanced defensive strategies.
Elite Brand Job Scams: A Sophisticated Credential Harvesting Operation Targeting Google & Facebook Accounts
Uncovering Coca-Cola & Ferrari job scams designed to steal Google & Facebook credentials, detailing technical attack vectors & defensive strategies.
URGENT THREAT ALERT: Sophisticated 'Fake Pudgy World' Phishing Campaign Targets Crypto Wallets
Highly technical analysis of a fake Pudgy World site phishing crypto passwords, detailing modus operandi, IoCs, and defensive strategies.
Phishing Deception: When Your 'Purchase Order PDF' Is a Credential Harvester
Unmasking a sophisticated phishing attack where fake purchase order attachments are HTML credential harvesting pages.
Advanced Japanese-Language Phishing Campaigns: A Deep Dive into Evolving Threat Vectors (Sat, Feb 21st)
Technical analysis of sophisticated Japanese-language phishing, covering social engineering, attack vectors, and advanced defensive strategies observed on Sat, Feb 21st.
Malicious AI Chrome Extensions: A Deep Dive into Credential Harvesting and Email Espionage
Analysis of fake AI Chrome extensions (ChatGPT, Gemini, Grok) stealing passwords and spying on emails, affecting hundreds of thousands of users.
Weaponizing Trust: Google Presentations Exploited in Vivaldi Webmail Phishing Campaign
Attackers leverage Google Presentations for phishing Vivaldi Webmail users, bypassing security and harvesting credentials via trusted domains.