Phishing

More malicious websites, malware portals, and phishing pages have been created using the artificial intelligence-powered website creation and hosting platform Lovable despite the website builder's newly adopted protections, according to BleepingComputer.

Novel QR code phishing techniques have been employed by a pair of phishing-as-a-service kits to better bypass detection systems, reports Infosecurity Magazine.

BleepingComputer reports that threat actors have been covertly exfiltrating Microsoft 365 logins through a new phishing attack technique that exploits both Active Directory Federation Services and legitimate office.com links.

Cybersecurity researchers have observed a growing trend of threat actors exploiting Telegram's Bot API to covertly exfiltrate sensitive data from high-value organizations and government entities, reports Cyber Security News.

Cybercriminals are shifting from traditional phishing to sophisticated "ramp-and-dump" schemes targeting brokerage accounts, exploiting gaps in multi-factor authentication, researchers say, according to Krebs on Security.

Organizations in the U.S, Europe, and other parts of the world have been targeted with spear-phishing emails purporting to be copyright infringement notices that facilitate Noodlophile information-stealing malware deployment, reports The Hacker News.