Phishing

Sites mimicking DeepSeek, AutoCAD, UltraViewer and more lead to remote system access.

The bad actor’s TTPs closely align to the Storm-1811 threat group identified last year by Microsoft, say Ontinue researchers.

Threat actors have leveraged Microsoft Teams and other tools to facilitate a malware-spreading voice phishing scam, according to Hackread.

Vasu Jakkal, Microsoft’s corporate vice president of security, emphasized that AI-driven cyber defense is essential as Microsoft Threat Intelligence processes 84 trillion signals daily, enabling proactive threat detection.

Attacks spreading the Remcos RAT malware have been launched by Russian state-backed cyberespionage operation Gamaredon against Ukraine as part of a phishing campaign that has been underway since November, reports Security Affairs.

BleepingComputer reports that Chinese cybercrime group XinXin has leveraged the Lucid phishing-as-a-service platform to target 169 organizations around the world with malicious Android and iOS smishing messages.

Intrusions involving the ClickFix technique have been deployed by North Korean hacking collective Lazarus Group against individuals looking to secure jobs in the cryptocurrency sector, especially in centralized finance, as part of an attack campaign that commenced last month, BleepingComputer reports.