Phishing

Okta has identified a significant shift in phishing tactics, with cybercriminals now using generative AI platforms like v0.dev by Vercel to create convincing phishing websites that mimic trusted brands such as Microsoft 365, Okta, and major cryptocurrency firms, Security Brief Asia reports.

Cybersecurity firm CTM360 has uncovered a widespread online investment fraud campaign leveraging fake news websites, termed Baiting News Sites, to deceive users in more than 50 countries, The Hacker News reports.

Indian defense organizations with systems running on Bharat Operating System Solutions Linux have been targeted by Pakistan-linked threat operation Transparent Tribe, also known as APT36, as part of a new cyberespionage campaign initially detected in early June, according to Hackread.

More industries are expected to be targeted by Scattered Spider ransomware operation following the discovery of nearly 500 phishing domains adhering to the group's naming conventions, Infosecurity Magazine reports.

Artificial intelligence was noted by the U.S. State Department to have been exploited to impersonate Secretary of State Marco Rubio as part of an ongoing scam, which has already been aimed at a U.S. senator and governor, as well as three or more foreign ministers.

Major industrial enterprises across Russia have been subjected to phishing intrusions spreading the Batavia spyware as part of a cyberespionage campaign that has been ongoing since July 2024, with attacks escalating even further since March, Security Affairs reports.

The campaign distracts victims from its malicious nature using benign decoy documents.

Spain's top-level domain has become the third most prevalently used domain in phishing campaigns after intrusions originating from the .es TLD increasing by 19-fold between the last quarter of 2024 and the first quarter of 2025, reports The Register.