Phishing

The operation, run by M/s Lord Mahavira Services India Pvt. Ltd., utilized an online platform to control approximately 21,000 SIM cards, obtained in violation of telecommunications rules.

Founded in 2024, Adaptive addresses the growing threat of AI-driven social engineering by offering an AI-driven simulation platform.

BleepingComputer reports that legitimate PayPal emails with fraudulent purchase notifications have been sent by exploiting the fintech platform's "Subscriptions" billing functionality as part of a new email scam.

Newly emergent phishing kits BlackForce, GhostFrame, InboxPrime AI, and a Salty-Tycoon hybrid could allow extensive credential exfiltration activities, according to The Hacker News.

User awareness training can't combat today's clever phishing scams. The only effective protection is to use phishing-resistant authentication.

Threat actors could stealthily compromise Microsoft accounts through the exploitation of the Azure CLI OAuth app as part of the new ConsentFix attack, which is yet another twist to the ClickFix social engineering technique, according to BleepingComputer.

Email attack techniques are evolving quickly, and traditional secure gateways can't keep up. Context-aware, AI-powered email monitoring may be the solution.