Phishing

Attacks involving malware masquerading as widely used software and services have impacted nearly 8,500 small and medium-sized business users during the first four months of 2025, GBHackers News reports.

Infosecurity Magazine reports that intrusions involving the ClickFix social engineering technique rose by 517% during the first half of 2025, with such tactics leveraged in almost 8% of all blocked attacks over the same period.

Iranian state-backed threat operation APT42, also known as Educated Manticore, Mint Sandstorm, and Charming Kitten, has launched a new phishing campaign aimed at cybersecurity professionals, computer science experts, and journalists across Israel amid escalating tensions between both nations, according to The Record, a news site by cybersecurity firm Recorded Future.

Over 70 organizations across all business verticals, most of which are in the U.S., have been subjected to a phishing campaign exploiting Microsoft 365's Direct Send feature for stealth that has been underway since last month, reports BleepingComputer.

Malicious actors have been creating signed remote access through ConnectWise ScreenConnect installer abuse as part of an Authenticode stuffing attack, reports BleepingComputer.

Threat operation TAG-140, which has been associated with Pakistan-linked hacking groups Transparent Tribe and SideCopy, has deployed the significantly improved DRAT V2 remote access trojan in a social engineering attack campaign with ClickFix tactics aimed at Indian defense organizations, Cyber Security News reports.

Hardware cryptocurrency wallet Trezor had its automated support system exploited to facilitate cryptocurrency theft as part of a new phishing campaign, according to BleepingComputer.

BleepingComputer reports that threat actors could leverage Windows File Explorer to execute malicious commands using the new ClickFix social engineering attack technique dubbed "FileFix".