Phishing

While only 224 users were affected, security pros raised eyebrows because the victims could have been prominent journalists and editors.

Two separate phishing campaigns have been distributing the new variants of the SideTwist and AgentTesla backdoors, according to The Hacker News.

Group-IB researchers uncover an underground market that leverage phishing kits to bypass MFA and launch BEC attacks in the United States, Australia, and Europe.

iMessages purporting to be from the U.S. Postal Service and fake website snare at least 108,000 victims.

Group-IB researchers say threat group leveraged automation to impersonate 251 unique brands and reaped a total of $64.5 million.

Adversary-in-the-middle phishing has become increasingly prevalent as threat actors seek to deploy stealthy high-volume phishing attacks, reports The Hacker News.

Unsurprisingly, Microsoft is the most commonly spoofed brand stopped by email security firm Abnormal Security so far this year.