Phishing

Microsoft Outlook users have had their credentials sought to be compromised by an AI-assisted phishing kit as part of a Spanish-speaking phishing campaign that has been underway since March, Cyber Security News reports.

BleepingComputer reports that malicious emails purporting to be from U.S. online food delivery service GrubHub have been luring its users to send Bitcoin to a provided wallet address in exchange for a tenfold increase in payout as part of a supposed 'Holiday Crypto Promotion' promo since Christmas Eve.

Cybernews reports that more than 200,000 law firms and legal teams around the world could have their sensitive client documents compromised through a phishing vulnerability in vLex's Vincent AI assistant, which could be exploited through concealed HTML code.

Cybernews reports that nearly 3,200 Check Point customers have been targeted with 9,394 phishing emails with the official Google domain crafted through Google Cloud automation tool exploitation over the past two weeks.

On this episode, Brian Long, CEO and Co-Founder of Adaptive Security, takes us through his journey from digital-marketing entrepreneur to building and funding a cybersecurity start-up.

The campaign leverages the trusted DocuSign brand, sending emails with fake "Review Document" links.

This campaign utilizes a commodity loader that shares common features with other attack campaigns, suggesting a unified malware delivery framework used by multiple high-capability threat actors.