Email security

Microsoft Outlook users have had their credentials sought to be compromised by an AI-assisted phishing kit as part of a Spanish-speaking phishing campaign that has been underway since March, Cyber Security News reports.

Half a dozen ransomware variants and over 6,000 nefarious links have been decrypted and dismantled, respectively, while $3 million associated with ransomware, extortion, and business email compromise attacks has been sequestered as part of the Interpol-led effort Operation Sentinel that clamped down on cybercriminal activities across Africa, reports BleepingComputer.

The campaign begins with emails impersonating eLibrary, a Russian scientific electronic library, using a domain registered six months prior to avoid detection.

BleepingComputer reports that legitimate PayPal emails with fraudulent purchase notifications have been sent by exploiting the fintech platform's "Subscriptions" billing functionality as part of a new email scam.

Email attack techniques are evolving quickly, and traditional secure gateways can't keep up. Context-aware, AI-powered email monitoring may be the solution.

Threat actors have exploited cybersecurity firm Mimecast's secure-link rewriting capability to deploy over 40,000 phishing emails mimicking SharePoint and DocuSign worldwide, Cybernews reports.

DocuSign was the most impersonated brand among phishing emails that bypassed secure email gateways.

The Hacker News reports that multiple new tactics have been employed by the advanced persistent threat operation ToddyCat to compromise corporate Outlook emails and Microsoft 365 access tokens.