NovaCookies: A New AitM Phishing Kit Targeting Microsoft 365
NovaCookies is a subscription-based phishing-as-a-service (PhaaS) toolkit that uses adversary-in-the-middle (AitM) techniques to steal Microsoft 365 sessions. It is sold for $320…
Tag: phishing
DOUBLOON DREDGER: Abusing Notion for Phishing
DOUBLOON DREDGER is a financially motivated threat actor that abuses Notion accounts to invite targets to view PDFs containing malicious links. The…
CISA Red Team Compromises Two Critical Infrastructure Orgs; One SOC Detected Nothing
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released advisory AA26-237A, titled "A Tale of Two SOCs," on August 25, 2026, detailing…
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
Cybersecurity researchers have uncovered a phishing-as-a-service (PhaaS) platform called AnonyMousKIT that uses AI voice agents to trick owners of stolen Apple devices…
AnonyMousKIT: PhaaS Platform for Apple Activation Lock Bypass
AnonyMousKIT is a phishing-as-a-service platform that uses AI voice agents and multi-channel lures to steal Apple device passcodes and 2FA codes from…
Mirage Security Analyzes Subscription Vishing Service
Mirage Security analyzed a subscription vishing service with commercial text-to-speech, providing insights into the evolution of AI-driven phishing.
WhatsApp Rolls Out Multiple Passkeys and Stronger Two-Step Verification to Thwart Phishing
Meta has announced new WhatsApp account security features, including support for multiple passkeys per account on both iOS and Android, enhancing phishing-resistant…
E4del and PINHOLE RATs Abuse FTP Banners as Dead Drop Resolvers
Cybersecurity researchers have uncovered a novel campaign that abuses FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote…
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
Cybersecurity researchers at OX Security have uncovered a campaign that abuses 24 npm packages as free phishing infrastructure. The packages host HTML…
unpkg: npm Mirror Abused for Phishing
unpkg is a content delivery network for npm packages. Threat actors have abused it to host malicious HTML files that render as…