Phishing

North Korean state-sponsored hackers are conducting spear-phishing campaigns targeting Ukrainian government, policy, and academic circles to gather intelligence on the country's position in the Russia-Ukraine war.

Hackers are employing a sophisticated technique called "Adception" to distribute malware by abusing legitimate Bing search-result redirects within Google search ads.

As detailed in The Hacker News, a sophisticated new phishing kit named Wazza has been identified, employing a multi-stage routing chain to screen visitors and automated traffic before delivering its final payload.

The UK's Report Fraud service has launched a public awareness campaign advocating for the adoption of passkeys, following a significant rise in financial losses due to account takeover fraud.

U.S. financial services faced a significant surge in phishing attacks during the first half of 2026, with nearly 40,000 malicious URLs identified.

A new phishing scam is targeting tourists applying for Schengen visas, with scammers sending fraudulent emails that mimic official communications from EU migration authorities.

A sophisticated scam campaign dubbed Milk Dragon is leveraging fake e-commerce websites and social media promotions to steal users' payment data.

Two vulnerabilities discovered in Apple’s iCloud Mail infrastructure allowed authenticated users to send emails that appeared to originate from any @icloud.com address, while still passing crucial email authentication checks like SPF, DKIM, and DMARC.