PhishingInfosecurity Magazine·11 hours ago
Fake Recruiter Scams Target Corporate Credentials on Mobile
RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials
← Back
PhishingHuntress Blog·6 days ago
Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
A phishing campaign emerging after DEF CON exploits X direct messages and malicious Google Docs to distribute multiple Remote Access Trojans including AMOS and NetSupport RAT. Huntress researchers identified the attack chain, which leverages the trust users place in legitimate document-sharing platforms to bypass security controls and deliver payload malware.
Read full article at Huntress Blog ↗Related Articles
PhishingThe Hacker News·13 hours ago
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. According to ANY.RUN research, 48% of targeted email addresses were potentially compromised. Most of the affected companies are US-based. Mirage2FA Campaign
PhishingThe Hacker News·13 hours ago
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't do harm, the threat actor’s use of npm isn't to infect developers who install it, but to use the
PhishingHelp Net Security·15 hours ago
ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack
ReliaQuest confirmed that one of its employees fell victim to a social engineering attack that provided attackers with a password and temporary access to the company's identity system. Extortion group ShinyHunters subsequently posted screenshots on its leak site, claiming responsibility and taunting the cybersecurity firm over the breach. The incident followed an earlier exchange between ShinyHunters and ReliaQuest's threat research team on social media.