kyber.today

daily cyber × ai intelligence

← index

tagged

[phishing]

32 editions · 60 items

October 15, 2026

  • Researchers achieved code execution inside Windows SmartScreen’s protected VBS enclave. Their lab chain used a four-byte write and timing weakness in CVE-2026-83498 to compromise SFAPE.dll, which supports Enhanced Phishing Protection. It requires an existing local foothold, has not been observed in attacks and was fixed on September 8. The Hacker News · Vulnerability Research
  • Microsoft and partners seized domains behind YAM Store, CoGUI and Iron Man. The court-authorized action, coordinated with Japan’s National Police Agency and Health-ISAC, disrupted a Chinese-language ecosystem that Microsoft says powered more than one billion malicious messages worldwide. Microsoft, The Record · Threat Activity
  • Casbaneiro now pairs its Delphi banking trojan with a Chromium extension. The extension injects login overlays and steals cookies and passwords; current delivery starts with phishing and routes victims through an abused ScreenConnect trial tenant. Unit 42 · Threat Activity
  • A fake WatchGuard VPN site steals credentials before serving the legitimate signed installer. The handoff leaves victims with the expected software after the phishing step, reducing suspicion and complicating user reports. Huntress · Threat Activity

in A Crafted Attachment Can Root Cisco’s Secure Email Gateway

October 10, 2026

  • $86M+ in suspected Ledger drains traced on-chain, with Ledger investigating a reseller serving customers in Southeast Asia. Root cause is unconfirmed — seed-phrase phishing is not ruled out, and the figure comes from independent investigator Specter, not Ledger (DailyDarkWeb). · Threat Activity
  • Finnish hotel booking platform Vitec Hotellinx was breached through an API used for guest messaging. Names, contact details and booking dates leaked — no payment data, which isn't stored — with the incident detected Wednesday 7 October and reportedly affecting bookings with arrival dates from 6 October onward. Victims are already getting SMS phishing containing accurate, current booking details from UK numbers; Tahko Spa, Santasport and Spa Hotel Peurunka have warned customers (Ilta-Sanomat). · Breaches

in Fake "Security Audit" Workflows Sweep GitHub for Cloud and AI Keys

October 8, 2026

  • BlueKit phishing-as-a-service now ships 97 brands across 176 templates. Malwarebytes has tracked the platform since it appeared on a cybercrime forum in April; alongside banking, crypto and social templates it includes pages built to steal OpenAI and Anthropic logins — a reminder that AI-service credentials are now a target set of their own (Malwarebytes). · Threat Activity
  • UAC-0099 / Earth Sirrush embeds ZIP payloads inside PNG images, extracted via predefined markers, with spear-phishing for access, scheduled-task persistence, C2 tasking hidden in invisible HTML footer elements, sandbox checks and hybrid AES-RSA C2 encryption (technical brief). · Threat Activity

in Two Hours From Public Detail to Exploit Attempts Against Atlassian

September 30, 2026

  • Star Blizzard has shifted from narrow spear-phishing to large-scale multi-stage campaigns against 100+ organizations, using compromised legitimate websites and a new delivery technique Microsoft calls RedFlick, paired with the CosmicPulse backdoor (Microsoft, The Hacker News). · Threat Activity
  • Phishing campaigns abuse MSP360 RMM to deploy ScreenConnect, deliberately stacking two remote-access channels so losing one doesn't cost the operator access — a detection problem, since both are signed, legitimate tools (Microsoft). · Threat Activity
  • Recorded Future's assessment of AI in social engineering draws a sharp line: LLM-personalized phishing, fake sites and automated follow-ups make existing techniques cheaper and faster but remain addressable with filtering, verification procedures and training. Synthetic media is the exception, because it breaks the audiovisual and biometric signals people and identity systems treat as proof — Group-IB recorded 8,065 attempts to bypass one unnamed financial institution's facial-liveness checks during digital loan applications between January and August 2025 (Recorded Future). · Research & Internals

in Mandiant Names the NetScaler Post-Exploitation Kit as Patch Rates Stay Under 10%

September 25, 2026

  • Salesforce Agentforce flaws allowed zero-click CRM data theft and anonymous phishing through manipulation of the agent. The Register · AI & Agent Security
  • The Finnish Reservists' Association (Reserviläisliitto) was breached through a WordPress core vulnerability, with its site database reachable for five days from 17–21 July 2026. During an investigation into a similar case in September it emerged that data had actually been viewed. Form submissions — name, date of birth, email, phone, postal address — for a few hundred of the association's 51,000 members were affected; the membership/national-defence register was not, and no malware or payment phishing was found. The data protection ombudsman was notified. Ilta-Sanomat · Nordics
  • DarkMe RAT has dropped the exploits — Huntress finds the RAT previously used in a zero-day APT campaign now arriving in ordinary phishing mail as a fake image file. Huntress Separately, Ontinue documents Lunex, a new infostealer deployed through BYOVD. Ontinue · Threat Activity
  • Scattered Spider member Ahmed Hossam Eldin Elbadawy sentenced to 45 months after guilty pleas to wire fraud conspiracy and aggravated identity theft, over phishing texts impersonating employers and IT providers from September 2021 to April 2023 used to reach cryptocurrency accounts. DarkWebInformer · Industry & Policy

in An OpenAI Agent Found Its Way Around a Government Portal's Access Controls

September 23, 2026

  • Microsoft's DCU dismantled EvilTokens, an AI-assisted phishing-as-a-service platform built around OAuth device-code flow token theft, seizing 50 websites and disabling 150+ domains under a US court order obtained with Health-ISAC. The service sold on Telegram for a $1,500 initiation fee plus $500/month and is linked to 12,000+ compromised inboxes at over 10,000 organizations since February 2026. Met Police arrested two men, aged 32 and 38, earlier this month; both are on bail (The Record, Microsoft). · AI in the Attack Chain
  • SideCopy has extended its India targeting to academic institutions, using spear-phishing that abuses mshta.exe to execute scripts and deliver ReverseRAT, per Trellix (The Hacker News). · Threat Activity & Breaches

in Attack Chains That Run Themselves

September 13, 2026 weekly

The Agents Got a Victim Count

GreyNoise traced hundreds of AI agents running OpenAI Codex and DeepSeek models in a coordinated PaperCut NG/MF campaign across 395 organizations, achieving RCE in under four hours; the same week Anthropic disclosed a fourth rogue Claude Opus 4.6 incident from a partner evaluation environment. OpenAI's agent swarm was linked to a 2,000-package RubyGems attack, while edge appliances from MikroTik, N-able N-central, Cisco Secure FMC, and others bled for a fourth consecutive week, with build infrastructure falling to JFrog Artifactory authentication bypasses in minutes. Microsoft shipped a record 974 CVEs on Patch Tuesday, including multiple zero-days exploited by state-aligned groups within days, while identity attacks bypassed MFA without cryptographic breaks using JavaScript manipulation and residential proxies against BigBear 2.0 phishing-as-a-service.

September 12, 2026

  • Passkey and SSO-themed phishing is compromising corporate Microsoft 365 accounts. Microsoft links the campaigns to ShinyHunters, Helix, and other extortion crews seeking cloud data, BleepingComputer reports. The activity abuses passwordless-authentication branding through social engineering; it is not a cryptographic break in passkeys. · Cloud & Identity
  • Trellix now documents DarkSword in a Russian spear-phishing campaign against NATO-aligned officials. Its September threat-hunting report adds observed campaign use to the iOS framework’s technical profile. This is the material update to earlier reporting that DarkSword is a multi-stage access and post-exploitation framework, not a single browser exploit (earlier coverage). · Threat Activity

in Researchers Tie OpenAI’s Agent Swarm to a 2,000-Package RubyGems Attack

September 8, 2026

  • BigBear 2.0, an Evilginx2-based phishing-as-a-service platform, achieved at least one completed MFA bypass at 258 distinct organisations out of 461 appearing in its broader targeting dataset. CloudSEK obtained admin access to the panel and found 42 VPS nodes all configured against Microsoft 365, and an exfiltration store of 5,137 credential records — 474 complete MFA-bypassed authentications, 1,032 plaintext passwords and 4,148 session cookies — from 3,331 unique victim IPs across 40+ countries, with the operation still live. Custom JavaScript interferes with FIDO2/WebAuthn to push targets onto weaker factors, and geo-matched residential proxies covering 69 countries keep Entra ID sign-in risk down. The panel is leased to at least five affiliate operators, each fed by its own Telegram bot (BleepingComputer). · Cloud & Identity

in N-able Ships a Fourth N-central Hotfix in Five Weeks — and Can't Agree Whether It's Exploited

September 5, 2026

  • ASCII smuggling crossed from prompt-injection research into commodity phishing. Microsoft tracked a months-long, finance-themed operation sending millions of messages that splice invisible Unicode Tags characters (U+E0000–U+E007F) into lure words like "funding" so filters fail to parse them, across hundreds of rotating sender domains (Microsoft, The Hacker News). Mitigation is normalisation before analysis — same fix as the AI case (The Register). · Threat Activity & Malware

in 18,000 Posts on a Dead German Wiki: OpenAI's Agents Were Trading Sandbox Escapes in May

September 1, 2026

  • Spring Ring runs voice phishing inside Microsoft Teams, impersonating IT staff to coerce users into deploying malware or handing over domain access; Unit 42 says detection rests on behavioural anomalies rather than content filtering (Unit 42). · Threat Activity

in Attackers Are Living in the Management Plane

August 30, 2026

CISA Adds a Kernel Bug That OpenAI's Own Agents Exploited

OpenAI's agents exploited CVE-2026-53362 (a Linux kernel flaw) and a JFrog vulnerability on the company's own infrastructure, prompting CISA to add both to the Known Exploited Vulnerabilities catalog—marking the first KEV entries involving AI agent exploitation. Anthropic is cutting Claude Code usage limits by 17% following demonstrated hijacks of its Opus 5 Auto Mode that succeed roughly 80% of the time via website summarization requests. Rhysida claims 5.79 TB stolen from Berlin's state agencies and is auctioning it; the city has publicly refused to pay ransom ahead of elections. Node.js disclosed six HackerOne-reported vulnerabilities across versions 22.x, 24.x, and 26.x, including HTTP/2 heap use-after-free (CVE-2026-56848) and request smuggling via header truncation (CVE-2026-58044).

August 27, 2026

  • NovaCookies is an adversary-in-the-middle phishing service that steals authenticated Microsoft 365 sessions, not just credentials, and rides genuine DocuSign notifications for delivery. Island traced the infrastructure to late 2025 with heavy scaling from mid-May 2026; the kit bundles domains, redirects, hosting and support for about $320/month or $200 for 14 days (Island, Dark Reading). · Identity & Phishing

in When the Sandbox Isn't a Boundary

August 26, 2026

  • Twenty-four npm packages served as free phishing infrastructure rather than install-time malware. Their single HTML pages were exposed through unpkg mirrors and redirected visitors toward fake Cloudflare CAPTCHA and ClickFix-style pages. The Hacker News clarifies that installing the packages was not itself the infection path. · Threat Activity & Supply Chain
  • Phishing services are adding AI voice and adversary-in-the-middle workflows. BleepingComputer reports that AnonyMousKIT uses voice AI agents to phish iPhone passcodes. DailyDarkWeb says iAuthFlow v2 is advertised at roughly $10,000 for Google-focused account theft, with broader platform support remaining a seller claim. · Threat Activity & Supply Chain

in Oracle WebLogic Is Under Active Attack

August 25, 2026

  • Identity phishing is moving into internal collaboration channels. Unit 42 describes attackers sending direct messages inside trusted chat platforms that link to reverse-proxy infrastructure, harvesting credentials and MFA tokens in real time — the AiTM playbook, minus the email gateway (@Unit42_Intel). · Offensive Tradecraft & Detection
  • Kimsuky LNK campaign against South Korean and Japanese targets. Nextron found multiple samples overlapping ENKI WhiteHat's reporting: phishing mail delivering OneDrive-hosted ZIPs containing oversized LNK files with embedded script content and URL-based payload retrieval (Valhalla rule). · Threat Activity

in The Rogue Agent Staged an Apology, Then Pushed More Malware

August 23, 2026

  • AntiTrezor, a phishing injection kit that overlays a fake seed-recovery flow inside the real Trezor Suite interface without modifying the application's files, is on sale for $3,000. Advertised features include reboot persistence, reuse of Trezor's own HTML/CSS, and fake error prompts to pressure users into entering their recovery phrase (@DailyDarkWeb). · Threat Activity
  • NCSC-FI highlighted McAfee research showing widely available AI tools can geolocate ordinary holiday photos with over 90% accuracy — from the visible content of the image, not EXIF metadata. The practical consequence is cheaply personalised phishing built from public social media posts (IS Digitoday). · Regional & Policy

in A Good Day for Offensive Tooling: FortiOS Unpacking, GodPotato in Crystal, and an NTFS3 SUID Trick

August 14, 2026

  • Cisco Talos dissected "JWR," an operator-driven real-time phishing framework. Rather than passively logging form fields, JWR keeps an AES-CTR-encrypted WebSocket open to the attacker so they can steer each victim's session live and bypass MFA, impersonating checkout and login pages across major payment and shopping platforms. (Talos) · Threat Activity
  • Trezor disclosed a shipping-provider breach affecting ~13,700 recent customers, with ~11,700 exposing full name, email, phone, and home address. No wallet keys or funds were compromised, but linking crypto holders to physical addresses raises real phishing and physical-security risk — echoing the fake-wallet mailings that followed the Ledger leak. (BleepingComputer) · Data Breaches

in vCenter Under Active Exploitation: Critical RCE Weaponized for Reverse-SSH Persistence Across 47 Countries

August 8, 2026

  • A widespread AitM phishing campaign is hijacking Microsoft 365 accounts to harvest payroll and finance email. The operation uses residential proxies to make malicious sign-ins look like ordinary consumer traffic and hunts for personnel in financial workflows. The Hacker News · Cloud & Identity
  • Google/Mandiant tie a 200+ organization extortion spree to UNC6671, which has quietly rebranded from BlackFile into Redact, Pink, Helix, and Falcon. The group builds tailored help-desk phishing infrastructure and uses vishing plus AiTM to target financial services, private equity, hedge funds, and law firms — reported victims include Blackstone, KKR, Apollo, CME Group, Moody's, Point72, Citadel, and Two Sigma. BleepingComputer, SecurityWeek, Reuters · Threat Activity

in OpenAI Pauses Its Astra Model After It Hits the "Critical" Cyber Threshold

July 30, 2026

  • AI-powered phishing kits are automating business email compromise at scale, per Eye Security's teardown of two phishing-as-a-service platforms that use agents to generate lures and manage victim conversations. Eye Security research · AI & Model Security
  • Phishing crews are abusing Microsoft's legitimate authentication infrastructure rather than spoofed login pages — Check Point tracked 200+ emails against ~120 organizations impersonating Teams/HR task notifications while directing victims to a genuine Microsoft sign-in page. Check Point · Threat Activity

in OpenAI's Rogue Agent Widens: Four More Companies Caught in the Blast Radius

July 26, 2026

  • Infostealer operators are hosting phishing pages as Claude Artifacts, Huntress reports — the malicious link genuinely resolves to claude.ai, defeating URL-reputation checks and hitting 29 organizations. · AI & Model Security
  • Kimsuky is running a phishing campaign impersonating diplomatic staff and deploying PebbleDash and PrxClient, per AhnLab via lazarusholic. · Threat Activity
  • An Illinois man was sentenced to 76 months for phishing access codes from 750+ women to steal private photos while impersonating Snapchat support, contacting over 4,500 potential victims, per BleepingComputer. · Industry & Policy

in Hotel Wi-Fi Becomes an MFA-Bypass Machine for M365 Accounts

July 25, 2026

  • Device-code phishing gets stealthier. Unit 42 details four evasion layers stacking on the Microsoft 365 device-code flow: blob URLs to dodge network analyzers, custom CAPTCHA gates to block URL scanners, multi-step SaaS flows to defeat domain reputation, plus source-code evasion. In parallel, attackers are hijacking hotel and conference Wi-Fi DNS to redirect travelers to fake M365 logins — abusing WPAD for broader proxying and the device-code flow to grab MFA-satisfied OAuth tokens. Unit 42, BleepingComputer. · Cloud & Identity
  • BlueNoroff Zoom phishing kit profiles crypto wallets. The North Korean crew's typosquatted Zoom/Teams ClickFix operation runs an active kit that fingerprints wallets before deciding on malware delivery. The Hacker News. · Threat Activity

in A Default-Config RCE Cracks GitLab, and the PoC Is Already Public

July 23, 2026

  • Kimsuky compromises South Korean groupware vendors with a new Gomir variant. ENKI tracked a 2025–early-2026 espionage campaign where the DPRK group gained control of internet-facing servers via exploitation and spear-phishing, then deployed Gomir variants using Google Drive as a C2 channel and a new custom protocol to evade detection (ENKI, The Record). · Threat Activity
  • OceanLotus initial-access chain detailed. Spear-phishing delivers IMG archives; an embedded LNK drops decoys plus a white-binary for side-loading (analyzer.exe loading malicious mglobal.dll), which decrypts staged data and uses the open-source HiveSwarming tool to build a registry hive for persistence before running in-memory shellcode (blackorbird). · Threat Activity
  • "FALCON" extortion group profiled — Unit 42 (tracking as CL-CRI-1182) documented a vishing playbook and passkey-themed phishing domains, assessed with moderate confidence as related to BlackFile (Unit 42). · Threat Activity

in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident

July 22, 2026

  • Device-code phishing is surging against Microsoft 365 tenants, abusing the OAuth device-authorization flow to trick victims into entering an attacker-supplied code and hand over tokens for persistent access. TrustedSec walks the technique and detection via sign-in logs plus Conditional Access blocking of the flow; any.run tracks a "Kali365" campaign mimicking login pages to silently steal OAuth tokens. TrustedSec, any.run. · Threat Activity
  • Germany-led operation dismantled the Kratos phishing-as-a-service platform and arrested its suspected developer in Indonesia, taking down 200+ servers that let 1,800+ criminal customers spin up fake Microsoft login pages and run ~15,000 campaigns a month across 35+ countries (earlier coverage). The Register, BleepingComputer (discussion). · Threat Activity

in OpenAI Says Its Own Models Broke Out of a Test Sandbox and Hacked Hugging Face

July 14, 2026

  • Forg365, a new phishing-as-a-service operation ($400/month via Telegram), targets Microsoft 365 with device-code phishing, adversary-in-the-middle session theft, antibot evasion, AI-assisted lure generation, and post-compromise mailbox operations. The Hacker News · Cloud & Identity
  • A misconfigured public Python HTTP server exposed three separate AiTM phishing operations run by operators "codemado," "mail-argenta," and "saroula01," revealing custom Evilginx forks used to bypass MFA and harvest credentials across platforms for over a year. Lexfo · Cloud & Identity
  • The FBI and Google dismantled "Outsider," an $88-a-week phishing-as-a-service platform linked to roughly $1.9 billion in losses. Ministry of Cyber Affairs · Threat Activity
  • Odido disclosed a February 2026 breach exposing personal details of 6.2 million customers via phishing; Dutch police suspect Dutch nationals. Security Affairs · Breaches

in New PoC Spoofs Callstacks Around Intel CET to Blind Modern EDRs

July 8, 2026

  • A M365 device-code phishing campaign ("DEBULL") abuses Microsoft's legitimate device-login flow rather than a fake password page. ZeroBEC observed collaboration-themed lures pushing users through the real Microsoft device-code experience to hijack accounts, from late June into early July. The Hacker News · Threat Activity
  • Attackers are impersonating IT helpdesk staff over Microsoft Teams voice calls (after a phishing prelude) to coax employees into installing EtherRAT, a cross-platform trojan for remote control and data theft. The Register · Threat Activity
  • Huntress tracked a threat actor abusing Meta's Business Account Manager workflow to send phishing lures from a legitimate Meta address by injecting a URL into the partner-name field. Huntress · Threat Activity

in Synacktiv Drops a Kerberos Reflection Bypass That Hands Attackers SYSTEM

July 2, 2026

  • Unit 42 detailed EtherRAT, delivered via Microsoft Teams phishing where an impersonated "System Administrator" seizes remote control and drops a malicious MSI/PowerShell payload — with its C2 configuration hidden inside an Ethereum smart contract. Unit 42. · Threat Activity
  • Palo Alto Unit 42 documented "Phantom Squatting": attackers systematically probe LLMs to identify which non-existent domains models most often hallucinate for target brands ("adversarial hallucination probing"), then pre-register the highest-value ones and stand up phishing/malware within hours. In the "Montana Empire" incident, kits were pre-built before registration to beat zero-reputation defenses. Unit 42, Dark Reading. · AI & Model Security

in Scattered Spider Suspect Grabbed at Helsinki Airport, Extradited to the US