SeedHunter Module for Seed Phrase Theft
SeedHunter is a module of the OkoBot framework that injects into legitimate wallet apps (Trezor Suite, Ledger Wallet, Ledger Live) to display…
Tag: phishing
GlassWorm Malware
GlassWorm is a malware that uses USB device detection to trigger phishing windows on Windows systems, similar to SeedHunter but with a…
Volexity Highlights UNC6293 Phishing Lures
Volexity, a cybersecurity company, highlighted UNC6293's phishing lures in December 2025, noting diplomatic themes and conference-related lures.
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths Swati KhandelwalJul 14, 2026SaaS Security / Identity Security Attackers whose methods line…
Weekly Cybersecurity Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
This week's cybersecurity landscape is marked by a series of critical threats and vulnerabilities. Progress has urged ShareFile customers to shut down…
Amazon Simple Email Service (SES)
Amazon SES is a cloud-based email delivery service used by Forg365 to send phishing emails, leveraging legitimate infrastructure to evade detection.
Twilio SendGrid Email Delivery Service
Twilio SendGrid is an email delivery service used by Forg365 to host images and tracking resources in phishing emails.
ConnectWise ScreenConnect Remote Access Software
ConnectWise ScreenConnect is a legitimate remote access software delivered as part of phishing campaigns using The Quarry kit.
Docusign: Electronic Signature and Document Management
Docusign is a company that provides electronic signature and document management services. NovaCookies campaigns abuse genuine Docusign notifications to deliver counterfeit document-share…
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is targeting Microsoft 365 accounts using device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, AI-assisted…