Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has expanded its capabilities to include device code phishing, a technique that abuses the…
Tag: cybercrime
DOUBLECUP Loader-as-a-Service Uses ClickFix and Steganographic PNGs to Deliver CountLoader and DeviceManager RAT
A new Russian loader-as-a-service (LaaS) operation named DOUBLECUP is leveraging ClickFix social engineering lures and steganographic PNG images cached in victims' browsers…
DOUBLECUP: A New Russian Loader-as-a-Service
DOUBLECUP is a Russian loader-as-a-service (LaaS) operation active since June 2026. It uses ClickFix lures and steganographic PNG images to deliver malware…
SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Chinese cybercrime group Silver Fox has been observed targeting a Japanese industrial manufacturing organization with a sophisticated attack chain that leverages…
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies to siphon funds…
Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity
The Federal Security Service of the Russian Federation (FSB) has charged Telegram founder Pavel Durov with aiding terrorist activity and failing to…
TA4922: Chinese-Speaking Cybercrime Actor Behind Tax-Themed Phishing Campaigns
TA4922 is a Chinese-speaking cybercrime actor associated with tax-themed phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams. The group…
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
The operators of the DevMan ransomware-as-a-service (RaaS) scheme maintain a dedicated web platform that offers affiliates the ability to build payloads, oversee…
eCrime.ch Collaborates on Clop Attribution
eCrime.ch, a Swiss cybercrime monitoring platform, contributed to attributing the Windchill web shell to Clop.
Golden Chickens MaaS Ecosystem Resurfaces
Golden Chickens, also tracked as Venom Spider and TAG-195, is a financially motivated malware-as-a-service developer. It has resurfaced with four new malware…