Phishing

Windows systems have been covertly compromised with the Teramind endpoint monitoring software for unauthorized surveillance as part of advanced phishing campaigns spoofing Zoom and Google Meet, GBHackers News reports.

The malicious version 5.8 of QuickLens was pushed to approximately 7,000 users on February 17, 2026, after the extension changed ownership.

The report details how generative AI and AI agents are becoming central to new threats, with risks of over-delegation and privilege misuse growing.

The scam employs a "today only" tactic, presenting victims with a notification of a €499.99 charge for a subscription, with the date dynamically set to the current day.

The attackers create fake Next.js projects, a popular JavaScript framework, and host them on platforms like Bitbucket.

SLH, a high-profile supergroup comprising LAPSUS$, Scattered Spider, and ShinyHunters, is known for advanced social engineering tactics.

Research by Gen Digital analyzed over 14.57 million Meta ads, revealing that nearly one-third were associated with fraudulent activities.