Browsing Tag
Scam
1246 posts
Hackers Use Hijacked University Emails to Scam Students, Pose as FBI Agent
Students, job seekers and university staff, watch out for fake job offers sent from legitimate university email accounts.
Tech Support Scam Kit Uses Google Ads to Deliver Fake Security Alerts
Google Ads deliver a tech support scam kit that shows fake security alerts, makes browsers appear locked and…
Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams
Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam…
New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.
Revolut Customers Targeted by Phishing Campaign After Data Breach
Revolut customers are being targeted with phishing texts days after a social engineering attack exposed sensitive customer data, including IDs and selfies.
Fake OpenAI Billing Emails Target ChatGPT Users in Credential Phishing Scam
Cofense researchers identified phishing emails impersonating OpenAI billing notices to steal ChatGPT credentials and payment information.
Hackers Pose as IT Support, Use Fake Passkey Lures to Steal Microsoft 365 Access
Microsoft warns of fake passkey and IT support attacks targeting Microsoft 365 accounts to steal authentication tokens and access corporate cloud data.
Google Play Early Access Abused by Thousands of Suspicious Android Apps
Bitdefender finds thousands of suspicious Android apps abusing Google Play Early Access with fake rewards, deepfake ads, misleading utilities and brand impersonation.
Fake Sexual Misconduct Emails Target Universities with Zoho RAT
Cofense details a phishing campaign targeting healthcare-linked universities through Google Drive links that lead recipients to install Zoho RAT.
Hackers Stream Real Google Login Pages to Steal Passwords and 2FA Codes
NordVPN researchers found a phishing service relaying live Google sign-in sessions to intercept passwords, 2FA codes, and active authenticated account sessions.