Threat intelBrief2 min read
Push Security found registration pages promising free AI subscriptions and other rewards, then routing visitors into two phishing-as-a-service platforms that grab tokens, passwords and session cookies.
ResearchBrief2 min read
Kela says the cluster has used more than 300 fake domains, 248 of them impersonating 189 US financial institutions, and that a repeat visit gets a closed-hosting notice instead of the login page.
IncidentsBrief2 min read
The Interior Ministry says police identified the group's suspected members with help from Kaspersky. The alleged leader is under house arrest; two others were released under travel restrictions.
Threat intelCVE-2026-40217CVSS 8.82 min read
GTIG and Mandiant describe two clusters: one scanning for exposed LLM endpoints, another stealing valid API keys and selling access through "LLM mixers".
IncidentsBrief2 min read
The exchange says two engineers were targeted in a recruitment-themed social engineering attack, and that the loss came from a multi-stage campaign rather than one phishing email.
Threat intelExploitedCVE-2025-8088CVSS 8.42 min read
The Russia-aligned group has been active since at least February 2025, stealing documents and credentials from law enforcement, local councils and a transport hub for foreign military aid.
Threat intelBrief1 min read
Researchers describe government and cloud-service impersonation in an espionage campaign targeting Israel and the Kurdistan Region of Iraq.
Threat intelBrief2 min read
The kit skips password-harvesting pages entirely, walking victims through Microsoft's own Device Login portal with a code the attacker supplied.
Threat intelBrief2 min read
A threat cluster Group-IB calls CyberDakait has used smishing and vishing to push malicious APKs that impersonate Indian banks, harvest banking credentials and mine cryptocurrency on infected phones.
IncidentsBrief2 min read
Chukwuemeka Amachukwu was extradited from France and pleaded guilty to fraud, hacking and identity theft charges tied to spearphishing attacks on U.S. tax businesses.
IncidentsBrief2 min read
Authorities across 21 countries arrested more than 1,400 suspects and recovered over $105 million in illegal funds during a two-month crackdown on business email compromise, ransomware and online scams.
IncidentsBrief2 min read
Operation Serengeti III, run across 20 African countries with US support, targeted online fraud, ransomware and business email compromise gangs, Interpol said.
