Phishing

Infosecurity Magazine reports that artificial intelligence-powered social engineering was cited by 63% of IT and cybersecurity professionals as the leading cybersecurity threat next year, compared with only 54% and 35% who regarded ransomware and supply chain attacks as the foremost threats, respectively.

Threat actors have leveraged TikTok videos to spread malware in a new twist to the ClickFix attack technique, according to Cybernews.

Cybersecurity Dive reports that a new Arctic Wolf survey revealed that nearly two-thirds of senior IT executives have clicked on phishing links, with 17% not reporting the incidents and about 10% admitting to clicking multiple phishing links without notifying anyone, which the security firm attributed to fear of termination or punishment.

Phishing emails generated with artificial intelligence are 4.5 times more likely to fool recipients, achieving 54% click-through rates compared to 12% for conventional phishing attempts, and AI could make phishing scams up to 50 times more profitable, according to The Register.

Attacks with Whisper 2FA PhaaS kit escalate, report finds Almost a million phishing intrusions have been fueled by the Whisper 2FA phishing-as-a-service kit since July, making it the third most prevalent PhaaS kit after Tycoon and EvilProxy, according to Infosecurity Magazine.

BleepingComputer reports that threat actors have been spreading bogus LastPass and Bitwarden breach alerts to facilitate desktop compromise as part of a phishing campaign that has been underway since the weekend.