More than 100 fraudulent shipment tracking scam campaigns have been deployed worldwide monthly on average in 2025, compared with nearly nonexistent activity in 2024, according to Infosecurity Magazine.
Intrusions harnessing calendar invites to spread fake invoice notices from U.S. cybersecurity firm Malwarebytes have been launched as part of a new scam campaign, Cybernews reports.
Malicious actors believed to have leveraged the newly emergent Kratos phishing-as-a-service kit in a sophisticated multi-stage attack against a C-suite executive at Swedish exposure management and identity security provider Outpost24, reports SecurityWeek.
North Korean advanced persistent threat group Konni, which is associated with Kimsuky and APT37, has exploited the widely used South Korean instant messaging app KakaoTalk to facilitate malware distribution and data theft as part of a spear-phishing campaign, United Press International reports.
