New phishing attack uses real-time interception to bypass 2FA
This phishing kit bypasses 2FA via session hijacking and real-time credential theft. Kurt “CyberGuy" Knutsson offers four ...
iPhone farms sending more than 100,000 scam iMessages per day
iPhone farms – banks of phones equipped with rotating temporary Apple IDs – are being used to send more 100,000 scam ...
Phishing-as-a-service operation uses DNS-over-HTTPS for evasion
A newly discovered phishing-as-a-service (PhaaS) operation that researchers call Morphing Meerkat, has been using the DNS ...
Russian zero-day seller is offering up to $4 million for Telegram exploits
Two sources in the zero-day industry say Operation Zero's prices for exploits against the popular messaging app Telegram will ...
Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks
A phishing-as-a-service (PhaaS) platform named 'Lucid' has been targeting 169 entities in 88 countries using well-crafted ...
The Hacker News9d
New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims' DNS Email Records
DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishing kit, and the related activity under the ...
Krebs on Security10d
When Getting Phished Puts You in Mortal Danger
Other domains Silent Push connected to the phishing scheme include: ciagov [.]icu, which mirrors the content on the official ...