Attackers Use Fake Passkey Updates to Hijack Microsoft 365 Accounts
Microsoft has warned about an active social engineering campaign where attackers impersonate corporate IT help desks to steal credentials, session tokens, and more.
Read Moresocial engineering
NFC Malware Allows Real-Time Theft Of Victims’ Bank Cards
Security researchers at Group-IB have identified a new Android malware that allows criminals to relay contactless bank card transactions in real time.
Read MoreFake Claude Code Source Downloads Used to Push Vidar and GhostSocks Malware
A threat actor is using the recent Claude Code source leak by Anthropic on March 31st to lure users to a malicious GitHub repository that installs malware on their device.
Read MoreMicrosoft Teams Flaws Allowed Message Spoofing And Executive Impersonation
Four now-patched Microsoft Teams vulnerabilities let attackers spoof executives, edit messages without the edit tag, and forge caller identities.
Read MoreFake Google Meet Page Delivers PowerShell Malware
A malicious Google Meet look-alike page hosted on hijacked WordPress sites is deceiving users into run a PowerShell command that install malware on their device.
Read More