Account takeover (ATO) fraud happens when attackers steal login credentials to access accounts. Learn how to detect and prevent account takeover fraud.
Read full article at Huntress Blog ↗Attackers are exploiting hidden HTML code to inject malicious prompts into emails, causing AI-powered summarization tools to generate false or misleading summaries that users see instead of actual email content. This technique leverages the invisible nature of HTML markup to deceive AI systems while remaining undetectable to human readers, creating a novel attack vector against email security infrastructure.
Interpol has arrested 58 individuals as part of an international operation targeting a crime-as-a-service network operating out of Argentina with approximately 196 members. The network supplied website domains and money laundering services to West African organized crime groups, including Black Axe, facilitating their illicit operations across borders.
Joshua Culver, operating under the alias "Maverick Young," was arrested for allegedly impersonating leadership within the NSA's Tailored Access Operations unit during a period when the division operated under a different name. The suspect also reportedly impersonated the Chief Justice of the Supreme Court as part of his deceptive activities. This case highlights social engineering tactics targeting high-profile government figures and sensitive intelligence agencies.
Norway's shared government digital infrastructure experienced a third DDoS attack on August 24, disrupting services accessed by citizens, businesses, and public agencies. The attack caused service interruptions but showed no evidence of data compromise. The incident highlights the ongoing targeting of critical government infrastructure with denial-of-service attacks.