Phishing

New SideWinder APT campaign weaponize Nepal protests Suspected Indian state-backed advanced persistent threat operation Sidewinder has exploited sweeping protests across Nepal earlier this month to facilitate attacks against Android and Windows devices, Cyber Security News reports.

Threat actors have been deceiving users into downloading various remote monitoring and management software in separate phishing campaigns, according to Infosecurity Magazine.

Hackread reports that North Korean state-sponsored advanced persistent threat operation Kimsuky has harnessed artificial intelligence-generated military IDs as part of a new spear-phishing campaign initially discovered in July.

The new PhaaS uses adversary-in-the-middle techniques to steal credentials, MFA codes, and session tokens.

Organizations across different sectors around the world are having their Microsoft and Google accounts targeted by multiple cybercrime operations in attacks exploiting the nascent VoidProxy phishing service that has been underway since January, reports The Register.

Mounting law enforcement action and increased artificial intelligence adoption have prompted ransomware intrusions to surge during the first half, with a 73% rise observed during the first quarter, while ransomware claims cost rose by 17% over last year, SecurityWeek reports.