Kali365 Exploits Microsoft Device Login to Access US Corporate Data

Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.

·

ANY.RUN, Cyber Attack, cybersecurity, Kali365, Microsoft, OAuth, PaaS, Phishing, Phishing Kit, Phishing Scam, SCAM, Security, Threat Intelligence

¶¶¶¶¶

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations

·

BlindDoor, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Fake Support, GoGRPC, Malware, Microsoft, Microsoft Teams, Phishing Scam, PyGRPC, Quick Assist, RevSocket, RSOX, SCAM, Security, Zscaler

¶¶¶¶¶

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens.

·

APT28, Cyber Attack, cybersecurity, Fancy Bear, Forest Blizzard, Hotels, Microsoft, Microsoft 365, Phishing, Phishing Scam, ReliaQuest, SCAM, Security, WIFI

¶¶¶¶¶

Fake FBI Agents Use IC3 Complaint Scams to Target Fraud Victims

Fake FBI agents are using deepfake videos, spoofed IC3 websites and false recovery claims to steal money and personal information from people who were scammed before, the FBI warns.

·

AI, Cyber Crime, Double Dip, FBI, Fraud, IC3, SCAM, Scams and Fraud, Spoofing, Voice Cloning

¶¶¶¶¶

“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware

An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows…

·

Cyber Attack, cybersecurity, FortiGuard Labs, Fortinet, Fraud, Malware, Phishing, Phishing Scam, SCAM, Security, TTP

¶¶¶¶¶

Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones

Group-IB says scammers are targeting Céline Dion fans through Facebook, duplicate digital tickets and fake websites impersonating Ticketmaster, AXS and the venue site.

·

Céline Dion, Cyber Attack, Cyber Crime, cybersecurity, FACEBOOK, Fraud, Phishing, Phishing Kit, SCAM, Scams and Fraud, Security, Shopify, Ticketmaster

¶¶¶¶¶

Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects

Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.

·

backdoor, cryptocurrency, cybersecurity, Malware, SCAM, Security, Siggen, Steam, Supply Chain, TROJAN, Visual Studio

¶¶¶¶¶

Armored Likho Hits Government, Energy Sectors With BusySnake Stealer

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.

·

AI, Armored Likho, Brazil, BusySnake Stealer, Cyber Attack, Cyber-Attacks, cybersecurity, Kazakhstan, Malware, Phishing, Russia, SCAM, Security

¶¶¶¶¶

AI Can Forge Documents in Minutes – “Looks Right” Is No Longer Enough

Generative AI is making document fraud faster and harder to spot, pushing security teams to verify provenance, signatures and file integrity at intake securely.

·

AI, Artificial Intelligence, Fraud, PDF, SCAM, Scams and Fraud, Technology

¶¶¶¶¶

Fake “Google Notes” Browser Extension Caught Swapping Crypto Wallet Addresses

McAfee says a Google Notes browser extension is replacing copied crypto payment details, putting wallet transfers at risk for Chrome, Brave, and Microsoft Edge users.

·

Browser, Chromium, Crypto, Cyber Attack, cybersecurity, Extension, Fraud, Google Notes, Malware, mcafee, SCAM, Scams and Fraud, Security

¶¶¶¶¶

00110010.com

00110010.com

Category: SCAM