The Darcula phishing-as-a-service platform is receiving a major upgrade with advanced website cloning capabilities, enabling cybercriminals to create perfect replicas of legitimate websites within minutes. Since March 2024, over 95,000 phishing domains and 20,000 fraudulent websites have b...
A sophisticated phishing campaign exploits Webflow CDN-hosted fake PDF documents to steal credit card information from users searching for online documents. The multi-step attack uses legitimate security features like Cloudflare Turnstile CAPTCHA to appear trustworthy, ultimately tricking ...
North Korean state-sponsored hacking group Kimsuky (APT43) launches DEEP#DRIVE campaign targeting South Korean business, government, and cryptocurrency sectors. The sophisticated cyber espionage operation uses Korean-language phishing emails with malicious documents, multi-stage PowerShell...
US and Dutch authorities dismantled HeartSender, a major Pakistan-based phishing operation, seizing 39 domains and servers. The criminal enterprise, responsible for over $3 million in US losses and millions of victims worldwide, sold phishing kits, malware, and spamming services. The opera...
A newly discovered malware campaign deploys AsyncRAT through Python payloads and Cloudflare tunnels, beginning with phishing emails containing Dropbox URLs. The sophisticated attack chain utilizes legitimate services and multiple stages to deliver various malware variants, including AsyncR...
