Phishing

Threat operations UNC6661, UNC6671, and UNC6240 have escalated extortion-themed cyber intrusions with the ShinyHunters branding that involved voice phishing and fake credential harvesting sites against cloud-based software-as-a-service apps last month, The Hacker News reports.

The campaign utilizes a wide range of randomly generated domains and subject lines designed to instill urgency, often personalizing messages with recipient names and specific dates.

The attack uses seemingly benign attachments and trusted cloud infrastructure to evade detection.

CyberScoop reports that the internet domain registration system has been noted by U.S. Secret Service Cyber Policy and Strategy Director Matt Noyes to be a neglected attack vector despite the cybersecurity risks it brings.

The "Report a Call" feature will be enabled by default, allowing users to flag calls directly from their call history on Windows, Mac, and web clients.

Memcyco's platform defends against threats like digital impersonation, phishing, and account takeover fraud.

Newly identified SEO poisoning marketplace HaxorSEO, also known as HxSEO, has been offering over a thousand backlinks to legitimate web domains compromised with a webshell that boosts the websites' search rankings, reports Infosecurity Magazine.