Technology ❯ Cybersecurity ❯ Social Engineering

Phishing

Smishing Fake Software Updates Fake Websites Spear-Phishing Vishing SMS Phishing Malware Credential Theft User Compliance Fake Captchas

ReliaQuest Says ShinyHunters Only Gained View-Only Access to Its Okta Dashboard

Device-trust controls plus rapid credential revocation blocked app access, preventing data theft.

FBI Warns Hackers Are Seizing Accounts to Steal and Sell Intimate Photos

SMOKE#SCREEN Campaign Uses Legitimate ScreenConnect Installs to Give Attackers Persistent Access

ClickLock Stealer Locks Mac Desktops and Forces Users to Reveal Passwords

PamStealer Verifies macOS Passwords Through PAM Before Stealing Data

WhatsApp Account Hijacks Deliver VBScript That Installs ManageEngine Remote‑Access Tool

Carnival Confirms Data Breach Affecting Nearly 6 Million Customers

Rapid7 Links Iran’s MuddyWater to False-Flag Chaos Ransomware Operation

Russia Tightens Digital Controls as Germany Probes Signal Phishing of Top Officials

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Figure Data Breach Exposes Nearly 1 Million Customer Records

Astaroth Banking Trojan Now Spreads via WhatsApp Worm in Brazil

Fake Booking.com BSOD Lures Install DCRat via MSBuild in European Hotel Hack

New Android ‘Sturnus’ Trojan Reads On‑Screen Chats and Raids Banking Apps

Fake Windows Update Screens Drive Ongoing ClickFix Malware Wave

Play Protect Now Blocking Evolving ‘ClayRat’ Android Spyware Targeting Russian Users

ESET Uncovers ProSpy and ToSpy Android Spyware Masquerading as Signal and ToTok

Active FileFix Campaign Uses Steganographic JPGs to Deliver StealC via Fake Meta Alerts

Major NPM Supply-Chain Breach Hits Popular Packages After Maintainer Phished