Distributed Workforce

Attackers exploit PayPal’s email notifications to trick users into linking their accounts to attacker emails.

Hackers have set up a botnet based on exploitation of zero day in Four-Faith industrial routers.

Most phishing clicks have been aimed at cloud apps, the most targeted of which were those made by Microsoft as threat actors sought to compromise Microsoft 365 and Microsoft Live credentials, according to a report from Netskope.

AI-based attacks have begun to outpace those against endpoint systems

While the app gets distributed via a GitHub phishing site, all Android users worldwide are at risk.

"This means that passwords used for mail access may be intercepted by a network sniffer. Additionally, service exposure may enable password guessing attacks against the server," said Shadowserver.