Phishing

Two separate phishing campaigns have been distributing the new variants of the SideTwist and AgentTesla backdoors, according to The Hacker News.

Group-IB researchers uncover an underground market that leverage phishing kits to bypass MFA and launch BEC attacks in the United States, Australia, and Europe.

iMessages purporting to be from the U.S. Postal Service and fake website snare at least 108,000 victims.

Group-IB researchers say threat group leveraged automation to impersonate 251 unique brands and reaped a total of $64.5 million.

Adversary-in-the-middle phishing has become increasingly prevalent as threat actors seek to deploy stealthy high-volume phishing attacks, reports The Hacker News.

Unsurprisingly, Microsoft is the most commonly spoofed brand stopped by email security firm Abnormal Security so far this year.

TraderTraitor is one of North Korea’s greatest weapons in its “hack for profit” schemes, and has a long and successful history of targeting cryptocurrency companies and other sectors for financial gain.