Urgent Threat Alert: Malicious Actors Actively Scanning for MCP Servers and AI Assistant Credentials
Threat actors are scanning for MCP servers and AI assistant credentials. Learn TTPs, mitigation, and forensic strategies.
Ukraine Exposes Russian Intelligence's Sophisticated Credential Theft Via Fake Support Texts
SSU & FBI uncover Russian intelligence's long-running spear-phishing campaign targeting officials, stealing messaging credentials globally.
Microsoft Sounds Alarm: Large-Scale Phishing Campaign Exploits Fake Compliance Emails to Harvest Credentials
Microsoft warns of a massive phishing campaign using fake compliance emails, targeting 35,000 users across 13,000 organizations globally.
UNC6692 Leverages Microsoft Teams for SNOW Malware Deployment: A Deep Dive into Advanced Corporate Breaches
UNC6692 exploits Microsoft Teams with fake IT alerts to deploy SNOW malware, steal credentials, and breach corporate networks.
Venom Unmasked: New Automated Phishing Platform Targets C-Suite for Advanced Credential Theft
Discover Venom, a sophisticated automated phishing platform targeting C-suite executives for credential theft, leveraging advanced evasion techniques.
AI-Powered 'DeepLoad': The Next Frontier in Evasive Credential Theft Malware
DeepLoad, an AI-generated malware, evades detection with massive junk code, stealing credentials. A new challenge for cybersecurity.
The Silent Breach: Why Attackers Are Logging In, Not Breaking In – A Deep Dive into Credential Theft in H2 2025
Credential theft surged in H2 2025, driven by infostealer malware and AI-enabled social engineering. This article explores defensive strategies.
Critical Alert: Malicious npm Package `@openclaw-ai/openclawai` Deploys RAT, Targets macOS Credentials
Malicious npm package `@openclaw-ai/openclawai` masquerades as OpenClaw, deploying a RAT and stealing macOS credentials.
Operation DoppelBrand: The GS7 Group's Sophisticated Weaponization of Fortune 500 Identities
Unmasking Operation DoppelBrand: GS7's advanced phishing campaign targeting US financial institutions with near-perfect corporate portal imitations for credential theft.
Unmasking the Invisible Threat: Advanced Techniques for Detecting and Eradicating Credential-Stealing Chrome Extensions
Comprehensive guide to identifying, analyzing, and removing malicious Chrome extensions that steal user credentials and data.
Rogue Outlook Add-in "AgreeTo" Transforms into Potent Phishing Kit, Exfiltrating 4,000 Credentials and Payment Data
Abandoned Outlook add-in "AgreeTo" became a sophisticated phishing kit, stealing 4,000 credentials and payment data.
Attackers Harvest Dropbox Logins Via Fake PDF Lures: A Deep Dive into Corporate Phishing
Analyzing a malware-free phishing campaign leveraging fake PDF "request orders" to steal corporate Dropbox credentials.
1Password Fortifies Defenses: New Pop-Up Warnings Combat Sophisticated Phishing Attacks
1Password introduces proactive pop-up warnings to protect users from phishing, preventing credential theft on malicious sites.
Phishing Alert: LastPass Users Under Siege by Sophisticated Maintenance Email Scams
LastPass warns users of urgent phishing emails demanding vault backups within 24 hours, leading to credential theft.
TamperedChef's Deceptive Delicacies: Malvertising Campaign Serves Up Malware via Fake PDF Manuals
TamperedChef malvertising campaign targets organizations with fake PDF manuals, deploying backdoors and stealing critical credentials.