OX Security Discovers npm Phishing Campaign
OX Security researchers identified a cluster of 24 npm packages abusing unpkg mirrors to host fake Cloudflare CAPTCHA pages. The campaign uses…
Tag: phishing
IONOS Hosts FIFA 2026 Lookalike Domains
IONOS is among the registrars hosting fraudulent FIFA-themed domains targeting travel and hospitality, according to Check Point's report.
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories Ravie LakshmananJun 18, 2026Hacking News / Cybersecurity News…
LastPass: Victim of Phishing Campaign by Scattered Spider Member
LastPass was targeted in a phishing campaign by Scattered Spider member Tyler Buchanan.
Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites
Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites Ravie LakshmananJun 19, 2026Malware / Threat Intelligence Dutch law enforcement authorities, along with…
INTERPOL Warns of Surge in Phishing, Ransomware, and AI-Driven Scams Across Asia-Pacific
A new report from INTERPOL reveals a dramatic increase in cybercrime across Asia and the South Pacific, driven by rapid digitalization, new…
RedLine: A Pervasive Information Stealer Malware
RedLine is an information stealer malware that targets credentials, browser data, and cryptocurrency wallets. It is commonly distributed via phishing and malicious…
Lumma: An Emerging Information Stealer Malware
Lumma is an information stealer malware that captures sensitive data such as passwords, cookies, and cryptocurrency information. It is often spread through…
LokiBot Resurfaces in New Phishing Campaign
A new email phishing campaign delivers LokiBot via JavaScript attachments. LokiBot harvests credentials from password managers like 1Password, Enpass, and KeePass, and…
Agentic AI: The Weapon That No Longer Needs a Warrior
Agentic AI represents a paradigm shift in offensive cybersecurity, where AI tools no longer require human operators to execute attacks. Unlike previous…