Phishing

The scam emails were found to originate from a legitimate PayPal address.

Malicious actors established repositories purporting to be a Telegram Bitcoin wallet bot.

Suspected Chinese-speaking threat actors distributed malicious emails with a ZIP archive.

Threat actors took over numerous YouTube accounts and spoofed professional CS2 players.

According to the researchers, the attack primarily targets individuals who are searching for documents, book titles, and charts on search engines like Google.

Intrusions not only entailed the mounting adoption of device-aware phishing approaches and fingerprinting techniques for greater stealthiness but also the utilization of geolocation-based redirection to facilitate localized scams, according to a report from Zimperium ZLabs researchers.

The phishing-as-a-service suite makes it easy for those without technical ability to make custom scam pages.

Downloading the trojanized installers for the BeamNG.drive, Universe Sandbox, Garry's Mod, Plutocracy, and Dyson Sphere Program games uploaded to torrent sites in September triggers an installer screen luring targets to continue with the setup process when dropper extraction and execution occurs, according to an analysis from Kaspersky.