Phishing

BleepingComputer reports that threat actors have revived the abuse of the decades-old "finger" command to facilitate remote command execution as part of new ClickFix malware attacks.

The FBI has warned that Chinese speakers across the U.S. have been subjected to a new health insurance fraud scheme that threatens extradition should they fail to pay their surgical bills, The Register reports.

The breach, detected on October 25, 2025, occurred when an employee fell victim to a social engineering scam, allowing the attacker to access names, addresses, emails and phone numbers of individuals across DoorDash's operational regions.

Hackers have harnessed Australia's cyber incident disclosure platform ReportCyber to compromise cryptocurrency wallets as part of a new scam campaign, Cybernews reports.

More than 4,300 domains have been registered by Russian threat actors to impersonate widely known booking and rental services, such as Booking.com, Expedia, and Agoda, as part of a phishing campaign that has sought to pilfer hotel guests' payment details since February, The Hacker News reports.

The screen-sharing scam involves scammers initiating unexpected video calls, posing as trusted entities such as bank employees or Meta support agents, according to research by ESET.

Humanix Security Inc. specializes in safeguarding the human layer of organizations, focusing on individuals, help desks and customer-facing channels vulnerable to social engineering exploits.