A sophisticated phishing campaign distributing Horabot malware is targeting Windows users across Latin America, primarily in Mexico, Guatemala, Colombia, Peru, Chile, and Argentina. Discovered by Fortinet FortiGuard Labs in April 2025, the attack uses fake invoice emails to deliver malware...
Russian hackers are targeting Ukraine-related organizations and human rights groups by exploiting OAuth 2.0 authentication to compromise Microsoft 365 accounts. Operating since March, threat actors UTA0352 and UTA0355 impersonate European officials, contacting targets via WhatsApp and Sign...
Morphing Meerkat is a sophisticated phishing-as-a-service platform operating since 2020 that uses advanced DNS techniques to evade detection. The service leverages DNS over HTTPS and MX records to dynamically identify victims' email providers and serve tailored phishing pages for over 114 ...
A massive Android malware campaign called "Vapor" has infected over 300 apps with 60 million downloads from Google Play. The malicious apps primarily served adware but some also stole credentials and financial information through phishing. First detected in early 2024, the campaign affecte...
The Darcula phishing-as-a-service platform is receiving a major upgrade with advanced website cloning capabilities, enabling cybercriminals to create perfect replicas of legitimate websites within minutes. Since March 2024, over 95,000 phishing domains and 20,000 fraudulent websites have b...
