Phishing

The campaign targets open-source developers to steal credentials and deploy malware.

Google says UNC6783 leverages social engineering and phishing campaigns to gain entry to the BPOs.

HackRead reports that threat actors have been delivering bogus missile warnings to pilfer Microsoft passwords as part of a new phishing campaign exploiting the ongoing conflict in Iran that also involves the U.S. and Israel.

Charming Kitten, associated with Iran's security apparatus, targets officials, researchers, and corporate employees by impersonating trusted contacts.

Phishing evolves into AI-driven, multi-channel scams abusing trusted platforms.

BleepingComputer reports that device code phishing intrusions have increased by 37.5 times so far this year.

This latest scam is a variation of previous toll and parking ticket scams, but instead of links, it features an image of a fake court notice with an embedded QR code.