Phishing

Lovable AI most likely to be harnessed in phishing App building generative artificial intelligence platform Lovable was significantly more vulnerable to being jailbroken to facilitate phishing campaigns, compared with Anthropic's Claude and OpenAI's ChatGPT large language models, having scored the lowest on VibeScamming tests, according to The Hacker News.

Increasingly targeted credential exfiltration attacks have been deployed by threat actors through precision-validated phishing, which leverages real-time email validation to ensure that only active addresses are given the fake login pages, Infosecurity Magazine reports.

New IoCs and free defense tools for Scattered Spider were made available by Silent Push.

Chinese threat operation Smishing Triad has been ramping up smishing campaigns involving the spoofing of U.S. and UK toll service providers during the first three months of the year, according to Infosecurity Magazine.

BleepingComputer reports that hacked Mailchimp, SendGrid, Mailgun, HubSpot, and Zoho accounts have been harnessed for the mass distribution of crypto seed phrase-containing emails aimed at compromising Coinbase and Ledger cryptocurrency wallets as part of the widespread PoisonSeed campaign, which has already impacted the Mailchimp account of Have I Been Pwned administrator Troy Hunt and certain Coinbase users last month.

Hoxhunt's artificial intelligence-based spear-phishing agent JKR has become 24% more effective in establishing simulated phishing campaigns than human red teams, which were 10% and 24% better than their AI counterparts in tests conducted in November and 2023, respectively, reports SiliconAngle.