Phishing

How API-based security is redefining email protection in the face of escalating human risk.

The campaign targeted approximately 1 million users across various sectors, including government, healthcare, education, and finance.

Jason Saayman says he installed a remote access trojan disguised as a Teams update.

The campaign leverages a newly-discovered phishing kit called VENOM.

BleepingComputer reports that organizations around the world, particularly in the U.S., Canada, France, Australia, India, Switzerland, and the United Arab Emirates, have been subjected to attacks involving the nascent EvilTokens device code phishing kit compromising Microsoft accounts.

The threat actor, identified as Brazilian cybercrime group Augmented Marauder and Water Saci, employs a unique delivery mechanism involving WhatsApp, ClickFix techniques, and email-based phishing.