Phishing

The campaign utilizes a wide range of randomly generated domains and subject lines designed to instill urgency, often personalizing messages with recipient names and specific dates.

The attack uses seemingly benign attachments and trusted cloud infrastructure to evade detection.

CyberScoop reports that the internet domain registration system has been noted by U.S. Secret Service Cyber Policy and Strategy Director Matt Noyes to be a neglected attack vector despite the cybersecurity risks it brings.

The "Report a Call" feature will be enabled by default, allowing users to flag calls directly from their call history on Windows, Mac, and web clients.

Memcyco's platform defends against threats like digital impersonation, phishing, and account takeover fraud.

Newly identified SEO poisoning marketplace HaxorSEO, also known as HxSEO, has been offering over a thousand backlinks to legitimate web domains compromised with a webshell that boosts the websites' search rankings, reports Infosecurity Magazine.

Scammers are creating fake Microsoft Teams groups with names resembling urgent billing alerts, such as "Subscription Auto-Pay Notice."