Tag Archives: phishing
Operation BlueDash Phishing Campaign Deploys Dual RMM Tools
Discover how Operation BlueDash uses fake Microsoft Teams updates and social engineering to deploy dual RMM tools and compromise enterprise endpoints. Continue reading
Microsoft 365 Phishing Campaign Hijacks Hotel Wi-Fi DNS
A sophisticated Microsoft 365 phishing campaign is targeting corporate travelers by hijacking hotel Wi-Fi DNS settings to steal OAuth session tokens. Continue reading
Kratos Phishing Kit Dismantled by International Law Enforcement
Global law enforcement has taken down the Kratos phishing kit infrastructure, a sophisticated platform designed to bypass 2FA protocols using adversary-in-the-middle attacks. Continue reading
Phishing-as-a-Service Platform ‘Kratos’ Dismantled by International Law Enforcement
International law enforcement agencies have dismantled the Kratos Phishing-as-a-Service platform, seizing over 200 servers and arresting its alleged administrator in Indonesia. Continue reading
SeasonalInvite Phishing Campaign Exposes Risks of Abused RMM Tools
Learn how the SeasonalInvite phishing campaign leverages legitimate RMM software to bypass security controls and gain unauthorized remote access to corporate systems. Continue reading
Ghost Phishing: New EvilTokens Campaign Bypasses MFA Security
Discover how the sophisticated ghost phishing campaign utilizes EvilTokens and OAuth exploits to bypass multi-factor authentication and compromise Microsoft 365 accounts. Continue reading
Sophisticated Phishing Campaign Targets Marketers via Fake Job Offers
A highly sophisticated phishing campaign is impersonating major brands to harvest Google credentials from marketing professionals using legitimate platform abuse. Continue reading
Phantom Squatting: How AI Hallucinations Enable New Cyberattacks
Discover how Phantom Squatting weaponizes AI-hallucinated domains to launch sophisticated phishing and supply chain attacks, bypassing traditional security measures. Continue reading
Vaultjacking Phishing Attack: How Hackers Steal Google Password Manager Vaults
Discover how the dangerous Vaultjacking phishing technique bypasses Google security to steal credential vaults and how you can protect your accounts. Continue reading