Phishing

Apple users have been targeted with an advanced voice-based phishing intrusion that weaponizes Apple Pay fraud alerts to facilitate real-time login credential and two-factor authentication code compromise, reports Cybernews.

Svara employed social engineering to acquire victims' personal information, including emails, phone numbers, and Snapchat usernames.

Tirith operates by integrating with various shells such as zsh, bash, fish, and PowerShell, scrutinizing every command pasted for execution.

The attackers impersonate messaging app support teams or chatbots to trick targets into revealing sensitive information.

Infosecurity Magazine reports that AI-enabled voice and virtual meeting fraud incidents that typically involved interactive voice response systems for reconnaissance surged by 1,210% between January and December last year, compared with a 195% increase in traditional fraud over the same period.

AI-based scam spoofing law firms uncovered More than 150 domains spoofing law firms have been created as part of an AI-assisted business impersonation scam, according to SecurityWeek.

Attacks leveraging Windows screensaver files to facilitate clandestine delivery of remote monitoring and management tools have been launched against multiple organizations as part of a spearphishing campaign, reports Cybernews.