Phishing

Multiple fake adult games have been leveraged to target Windows users across South Korea with the QuasarRAT malware, also known as xRAT, as part of a social engineering campaign, Cyber Security News reports.

AI leveraged for Truman Show-esque investment fraud Threat actors have exploited AI to trap investors into a personalized Truman Show-like investment fraud scheme, according to Infosecurity Magazine.

GBHackers News reports that Venezuelan President Nicolas Maduro's recent arrest has been exploited to deliver backdoor malware as part of an advanced social engineering campaign.

Adrian Sanabria and guests Dan Nickolaisen of Abnormal AI and Alexander Kisilev of Lundin Mining discuss how modern email security can tackle today's threats.

North Koreans use quishing to steal identities on mobile devices.

SiliconANGLE reports that analysis showed phishing-as-a-service kits were used in 90% of high-volume phishing campaigns in 2025 as attacks became more sophisticated and harder to detect.

More threat actors have been abusing spoof protection misconfigurations and complicated routing scenarios to imitate targeted organizations' domains and deploy seemingly internal phishing messages since May, Security Affairs reports.