Phishing

Hidden text can fool AI summarizers into presenting ClickFix instructions to users.

Cybersecurity experts are warning that enterprises must urgently address both technology gaps and human vulnerabilities after a wave of social engineering attacks targeted SaaS platforms.

Nearly 13,500 education, healthcare, manufacturing, and finance organizations around the world, particularly in North America, Europe, and Asia, have been subjected to a sweeping phishing campaign exploiting the widely used educational platform Google Classroom earlier this month, GBHackers News reports.

English-speaking cybercriminals skilled in social engineering are increasingly sought after in underground forums, signaling a troubling rise in targeted attacks, The Register reports.

HackRead reports that attacks involving the impersonation of CoinMarketCap journalists have been launched against cryptocurrency executives as part of a new spear-phishing campaign.

UpCrypter malware deploys various RATs, including PureHVNC, DCRat, and Babylon RAT.

Targeted social engineering campaign by Shamos once again shows how human beings are an enterprise’s weakest link.

Malicious actors have been increasingly hijacking software-as-a-service accounts via virtual private server exploitation to facilitate phishing attacks that evade IP reputation checks and geolocation defenses, SiliconANGLE reports.