Threat actors who weaponized the AI cloud-hosting service Railway were able to compromise the Microsoft cloud accounts of 344 organizations, including government, healthcare, finance, and construction entities, around the world as part of an AI-powered phishing campaign that has been underway since earlier this month, CyberScoop reports.
Numerous phishing scams involving tax-related lures have been launched by threat actors to deploy malware and credential-stealing payloads before the tax season ends on Apr. 15, The Hacker News reports.
In December, Fortra Intelligence and Research Experts (FIRE) released a major report exposing Scripted Sparrow, one of the most active Business Email Compromise (BEC) collectives operating today. The group sends an estimated 6 million highly targeted scam emails each month, impersonating executive coaching firms and leveraging spoofed reply chains,...
Recently, there has been a shift in cybercriminals’ behavior, marked by a surge in total phishing attack volume. These attacks are fueled by high-scale automation and a coordinated multi-channel siege targeting corporate collaboration tools. Trusted platforms such as email, Teams, calendars and others are in the cross-hairs, bypassing traditional p...
The fraudulent messages, which contained misspellings such as "Normstorm," urged recipients to send cryptocurrency to a provided wallet address, promising a 200% return.
