Phishing

In a report by Bleeping Computer, threat actors are exploiting Steam discussion forums to distribute cryptominers through a social engineering tactic known as ClickFix.

Phishing campaigns targeting financial institutions are evolving from credential harvesting for later use to real-time account hijacking, based on information published by The Hacker News.

The UK's National Cyber Security Centre (NCSC) issued an alert regarding a new 'zero-click' threat campaign orchestrated by Russian state-backed hackers targeting organizations across critical sectors, according to a recent report by IT Pro.

Today's attackers win not by defeating security controls, but by exploiting the trust we place in legitimate technologies.

The Kratos kit enabled cybercriminals with limited technical skills to harvest credentials, including passwords and session cookies, by providing convincing Microsoft-themed phishing pages.

Scammers are creating fake social media profiles and pages that mimic FBI personnel or IC3.

Security researchers at Group-IB have identified multiple scam campaigns targeting fans eager to purchase tickets for Celine Dion's return to the stage.

The campaign, active since at least January 2026, employs rotating lures tied to the calendar, such as tax themes in winter and Valentine's or Easter invitations later on, according to Forescout.