Scattered Spider's recent attacks on UK retailers highlight a threat actor that goes far beyond help desk scams. While social engineering support staff for credential resets has proven effective since 2022 against major targets like Caesars, MGM Resorts, and Transport for London, this is j...
Iranian threat actor UNC2428 deployed the MURKYTOUR backdoor in a job-themed social engineering campaign targeting Israelis in October 2024. Posing as recruiters from defense contractor Rafael, attackers directed victims to a fake website to download "RafaelConnect.exe," which installed ma...
Russian state-linked threat actors UTA0352 and UTA0355 are targeting Ukraine-affiliated organizations through sophisticated OAuth attacks since March 2025. The attackers impersonate European officials or use compromised Ukrainian government accounts to establish communication via messaging...
A sophisticated malware campaign called OBSCURE#BAT targets users in the US, Canada, Germany, and UK through social engineering tactics to deploy the r77 rootkit. The attack uses fake CAPTCHA pages and malware disguised as legitimate software, executing a multi-stage infection process that...
Five individuals aged 20-25 have been indicted in the United States for orchestrating a sophisticated cybercrime operation between September 2021 and April 2023. The group, known as Scattered Spider, conducted extensive social engineering and phishing attacks that resulted in approximately...
