0ktapus: Alternative Name for Scattered Spider Cybercriminal Group
0ktapus is another alias for the Scattered Spider group, recognized for its use of phishing and social engineering to compromise organizations. The…
Tag: social engineering
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
Security researcher Bert-Jan Pals analyzed roughly 3,000 live ClickFix payloads and presented findings at OrangeCon in early June, publishing details on June…
ClickFix: Fake CAPTCHA Phishing Technique
ClickFix is a social engineering technique that uses fake CAPTCHA pages to trick users into copying and running malicious commands, often leading…
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, adding a new tactic where attackers coax…
INTERPOL Operation Ramz Dismantles Sniper Dz Phishing Platform, Administrator Arrested
An INTERPOL-led operation codenamed Operation Ramz has successfully disrupted Sniper Dz, a decade-old phishing-as-a-service (PhaaS) platform, resulting in 201 arrests across 13…
Sniper Dz: Decade-Long Phishing-as-a-Service Platform
Sniper Dz was a sophisticated phishing-as-a-service (PhaaS) platform active since at least 2015. It offered ready-made phishing kits, hosting infrastructure, and operational…
Sniper Dz PhaaS Campaign Targets MENA Users via Fake Facebook Offers and Browser Alerts
Cybersecurity researchers at Group-IB have uncovered a fraudulent campaign targeting users across the Middle East and North Africa (MENA) region. The operation,…
Sniper Dz: Phishing-as-a-Service Platform Targeting MENA Users
Sniper Dz is a turnkey phishing-as-a-service (PhaaS) platform that was taken down in an INTERPOL-led operation. It facilitates credential theft and generates…
Mastra: Open-Source AI Framework Hit by Supply Chain Attack
Mastra is an open-source JavaScript and TypeScript framework for building AI applications. In June 2026, 145 of its npm packages were compromised…
145 Mastra npm Packages Compromised in Supply Chain Attack, Crypto-Stealer Deployed
On June 17, 2026, a software supply chain attack codenamed 'easy-day-js' compromised 145 npm packages under the @mastra/* namespace, a popular open-source…