Exploiting the Clock: Threat Actors Leverage US Eastern Business Hours in M365 Direct Send Phishing Campaigns
KnowBe4 researchers uncover M365 Direct Send phishing peaking during US Eastern business hours, bypassing traditional email security.
credential-harvesting
Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy
Global phishing campaign exploits Google's trusted infrastructure for credential harvesting, bypassing traditional security controls.
Cloaked Predators: How Threat Actors Leverage AI Crawler Disguises to Hunt Exposed Credentials
Threat actors are mimicking AI crawlers (OpenAI, Anthropic) to scan for and exploit exposed credentials and sensitive configuration files.
SVG Voicemail Phishing: Unmasking a Sophisticated Credential Harvesting Campaign Targeting 5,500+ Organizations
Analysis of a large-scale phishing campaign leveraging fake SVG voicemail attachments to bypass defenses and harvest credentials from 5,527 organizations.
Operation Campus Credential: Suspected Chinese APT Targets Universities via Vulnerable Roundcube Servers
Chinese threat cluster exploits Roundcube vulnerabilities to breach US/Canadian universities, harvesting credentials and sensitive data.
Operation PhishingNet: Russian Intelligence Deploys Fake Support Texts for Global Credential Theft
SSU and FBI uncover Russian intelligence campaign using fake support texts to steal messaging credentials from officials and military globally.
FortiBleed: Unmasking a Global 110 Million-Credential Harvesting Operation Targeting FortiGate Firewalls
Pre-emptive threat intelligence details FortiBleed, a Russian IAB's 110M credential harvesting operation targeting 430,000 FortiGate firewalls since February 2026.
AccountDumpling: 30,000 Facebook Accounts Compromised via Google AppSheet Phishing Relay
Guardio uncovers AccountDumpling, a Vietnamese-linked operation using Google AppSheet to phish 30,000 Facebook accounts.
Silver Fox Unleashes Sophisticated Tax-Themed Phishing Onslaught Against Japanese Enterprises
ESET researchers uncover Silver Fox's tax-themed phishing targeting Japanese firms, focusing on credential theft and financial fraud during tax season.
Deconstructing the Facebook Friend Post Scam: A Technical Deep Dive into Account Compromise & Phishing Vectors
Technical analysis of common Facebook friend post scams, detailing attack vectors, credential harvesting, and advanced forensic investigation.
SANDWORM_MODE Unleashed: Malicious npm Packages Steal Crypto Keys, CI Secrets, and API Tokens in a Shai-Hulud-like Supply Chain Attack
Active npm supply chain worm, SANDWORM_MODE, harvests crypto keys, CI secrets, and API tokens, demanding urgent developer vigilance.
Phishing Link Click: Unveiling the Technical Cascade of a Cyber Attack
Deep dive into the technical aftermath of clicking a phishing link, from immediate compromise to advanced persistent threats and DFIR strategies.