The operation centered around the W3LL phishing kit, a tool sold for approximately $500 that enabled cybercriminals to create convincing fake login pages for stealing usernames and passwords.
The scam begins with a phishing email designed to appear as an official communication from the IRS, informing recipients they are eligible for a $5,000 financial grant supposedly from Elon Musk.
HackRead reports that threat actors have been delivering bogus missile warnings to pilfer Microsoft passwords as part of a new phishing campaign exploiting the ongoing conflict in Iran that also involves the U.S. and Israel.
Radioactive Twinkies, Cthullu, BlueHammer, North Korea, CUPs, Axios, Fortinet, Cognitive Surrender, Aaran Leyland, and More on the Security Weekly News.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
