Phishing

SonicWall has warned of ongoing intrusions leveraging a trojanized installer of its NetExtender SSL VPN application to pilfer VPN credentials, The Register reports.

Multiple U.S. states including California, Florida, Georgia, New Jersey, New York, Pennsylvania, and Texas had their respective Departments of Motor Vehicles spoofed as part of a suspected Chinese phishing campaign discovered last month, according to Hackread.

Widely used cryptocurrency price tracking site CoinMarketCap had $43,266 worth of cryptocurrency pilfered from 110 victims following a Friday attack that involved the Inferno Drainer crypto-draining tool, according to Hackread.

Multiple sites hijacked for bogus support number injections Hackread reports that high-profile organizations, including Microsoft, Apple, Facebook, Bank of America, and PayPal, had their websites compromised to include fraudulent customer support numbers as part of a widespread search parameter injection scam.

Threat actors have been increasingly relying on social engineering tactics such as ClickFix scams to lure victims into infecting their systems with malware

Jamfs newly released Security 360 Report underscores the growing complexity of cybersecurity risks across mobile and Mac devices used in enterprise environments, with phishing, infostealers, and unpatched vulnerabilities emerging as top concerns, according to IT Brief Australia.