Phishing

The CypherLoc attack begins with a phishing email containing a malicious link or attachment.

Malwarebytes has identified a phishing scheme circulating on Facebook that preys on individuals aged 40 and above.

The Tycoon2FA phishing kit has adapted to leverage OAuth 2.0 device authorization grant flows, enabling it to compromise Microsoft 365 accounts.

F-Secure's Scam Intelligence & Impacts Report reveals that 56% of consumers faced monthly scam attempts in 2025.

Cybercriminals are using fake ticketing, accommodation, and transportation apps to trick fans into divulging login credentials or losing money.

The CalPhishing campaign, active since early 2026, begins with an email appearing to be an urgent administrative alert.

The company's latest offerings focus on campaign-level responses rather than individual email analysis. Vision 3.2, a key component, utilizes clustering and pattern matching to detect sophisticated attacks that vary content, senders, and delivery methods.

The messaging app is implementing several new features to protect users from scams, particularly those impersonating Signal Support.