Phishing

These financially-motivated attackers, closely aligned with Scattered Spider, use voice-phishing and social engineering to breach victims' identity platforms and traverse SaaS environments, according to a report by CrowdStrike.

The company detected about 8.3 billion email-based phishing threats between January and March.

Research from Cybernews indicates a significant rise in deepfake incidents targeting US officials over the past two years, with 156 recorded cases.

HackRead reports that threat actors have spoofed DHL in a new phishing campaign that employed a multi-step attack chain to siphon users' passwords.

Report sheds light on Chinese phishing campaigns against journalists, activists Chinese state-backed freelance hackers have launched a pair of phishing campaigns aimed at journalists and opposition activists in Taiwan, Hong Kong, Tibet, and China's Uyghur region in a span of nine months, according to The Record, a news site by cybersecurity firm Recorded Future.

The campaign targeted high-profile individuals including German politicians, ministers, military personnel, diplomats, and journalists.

TechCrunch reports that financial losses linked to social media scams were reported by the U.S. Federal Trade Commission to have increased eightfold over time, exceeding losses attributed to other methods of fraud used by criminals to trick consumers.