ClickFix: Fake CAPTCHA Phishing Technique
ClickFix is a social engineering technique that uses fake CAPTCHA pages to trick users into copying and running malicious commands, often leading…
Tag: phishing
Porkbun Involved in FIFA 2026 Fraudulent Domain Registrations
Porkbun is one of the registrars hosting fraudulent FIFA-themed lookalike domains, as identified in the Check Point report.
FIFA World Cup 2026 Cyber Threat Landscape
The FIFA World Cup 2026, which kicked off on June 11, 2026, has been targeted by pre-built fraud infrastructure across financial services,…
FIFA 2026 Cyber Risk: Pre-Tournament Threat Infrastructure Exposed
Check Point Research has revealed that threat actors pre-built and staged fraud infrastructure targeting the FIFA World Cup 2026 months before the…
Dropbox Abused to Deliver Malicious Payloads
An early phishing page in the SMOKE#SCREEN campaign delivered its payload via a Dropbox shared link, bypassing domain reputation filters since Dropbox…
236,000 DCloud Uni-App Sites Fuel Global Crypto Scams and Phishing Operations
Infoblox has uncovered a massive network of over 236,000 websites built using the legitimate Chinese open-source framework DCloud Uni-App, which are being…
Ukraine and FBI Uncover Russian Intelligence Campaign Using Fake Support Texts to Steal Messaging Credentials
The Security Service of Ukraine (SSU), in coordination with the U.S. Federal Bureau of Investigation (FBI), has uncovered a long-running cyber espionage…
Star Blizzard: Russian Threat Actor Targeting Messaging Platforms
Star Blizzard is a Russian threat activity cluster known for phishing campaigns targeting messaging app users, including Signal and WhatsApp, to steal…
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, adding a new tactic where attackers coax…
UNC4221 (UAC-0185): Russian Threat Actor in Messaging Phishing
UNC4221, also known as UAC-0185, is a Russian threat actor conducting phishing attacks on messaging applications to steal user credentials and sensitive…