A sophisticated mobile ad fraud operation called "SlopAds" has been exposed, involving 224 malicious apps with 38 million downloads across 228 countries. The scheme used advanced techniques including steganography to hide malicious code in images and conditional activation that only trigge...
The FBI has issued an urgent alert about two sophisticated cybercriminal groups, UNC6040 and UNC6395, conducting major data theft campaigns targeting Salesforce environments worldwide. UNC6040 uses social engineering to trick employees into connecting malicious OAuth apps, while UNC6395 ex...
Okta researchers have discovered VoidProxy, a sophisticated phishing-as-a-service platform targeting Microsoft 365 and Google accounts through adversary-in-the-middle attacks. The platform uses compromised email accounts to send phishing messages with shortened links leading to fake login ...
Cybersecurity researchers have discovered a new FileFix campaign that uses sophisticated social engineering to distribute StealC malware through fake Facebook security pages. The attack tricks users into copying malicious PowerShell commands disguised as harmless PDF paths, which then down...
A 22-year-old hacker who operated BreachForums, one of the world's largest cybercrime platforms with over 330,000 members, has been sentenced to three years in prison after prosecutors successfully appealed his original lenient sentence. Conor Brian Fitzpatrick, known as "Pompompurin," cre...
