Latest cybersecurity reporting from selected sources.

A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware

Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain

Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams

High-volume phishing campaign delivers Phorpiex malware via malicious Windows Shortcut files

A new phishing campaign has been identified, delivering the Phantom information-stealing malware via an ISO attachment

BitSight research has revealed how threat actors exploit calendar subscriptions to deliver phishing links, malware and social engineering attacks through hijacked domains

A previously unknown cyber actor UNK_SmudgedSerpent has been observed targeting academics with phishing and malware, merging techniques from Iranian groups

North Korean hackers have been observed exploiting cyber threat intelligence platforms in a campaign targeting job seekers with malware-laced lures

A global phishing campaign has been identified using personalized emails and fake websites to deliver malware via UpCrypter

Cybercriminals are using AI cloaking tools to evade detection, disguising phishing and malware sites

Phishing campaign targeting Taiwan has been identified, using tax-themed emails and malware like Winos and HoldingHands

A phishing campaign spoofing Booking.com has been observed targeting hospitality sector, using ClickFix to install malware

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine

Members of the World Uyghur Congress living in exile were targeted with a spear phishing campaign deploying surveillance malware, according to the Citizen Lab

Russian state actor Midnight Blizzard is using fake wine tasting events as a lure to spread malware for espionage purposes, according to Check Point

Microsoft said the ongoing phishing campaign is designed to infect hospitality firms with multiple credential-stealing malware

Phishing attack exploits social engineering techniques alongside Microsoft Teams and remote access software to deploy BackConnect malware

Winos 4.0 malware uses phishing emails to target organizations in Taiwan, Fortinet experts warn

Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing

Cybercriminals are selling access to the malicious GenAI chatbot via Telegram, providing rapid assistance for a range of nefarious activities, according to Abnormal Security