Phishing

HackRead reports that attacks involving the impersonation of CoinMarketCap journalists have been launched against cryptocurrency executives as part of a new spear-phishing campaign.

UpCrypter malware deploys various RATs, including PureHVNC, DCRat, and Babylon RAT.

Targeted social engineering campaign by Shamos once again shows how human beings are an enterprise’s weakest link.

Malicious actors have been increasingly hijacking software-as-a-service accounts via virtual private server exploitation to facilitate phishing attacks that evade IP reputation checks and geolocation defenses, SiliconANGLE reports.

Artificial intelligence agents could be deceived into executing malicious tasks through the new PromptFix attack technique, a ClickFix variant that involves prompt injections, reports Infosecurity Magazine.

The novel framework is capable of bypassing SMS, voice and companion app-based 2FA.

Almost a quarter of all ransomware attacks between January and June involved social engineering and business email compromise, compared with only 20% during the same period last year, with increased artificial intelligence usage fueling the growth, according to Channel Futures.

More malicious websites, malware portals, and phishing pages have been created using the artificial intelligence-powered website creation and hosting platform Lovable despite the website builder's newly adopted protections, according to BleepingComputer.