Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
Search across headline titles and summaries.
Weekly headline count for the current query.
Attacks also used a compromised chatbot in campaign to steal sensitive information from Business Users
GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials
Microsoft researchers warn of a large-scale phishing campaign using fake compliance emails to steal credentials, targeting 35,000 users across 13,000 organizations worldwide
A large-scale credential theft campaign targeting senior executives has been linked to a previously unknown automated phishing platform called Venom
Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams
New phishing campaign dubbed Operation DoppelBrand targeted major financial firms like Wells Fargo
Multi-stage attack begins with fake message relating to business requests and evades detection with link hidden in a PDF
Phoney email alerts suggest users need to backup their LastPass accounts within 24 hours. LastPass says it would never require this action from users
Loan phishing operation in Peru is stealing card info by impersonating financial institutions
Phishing attacks have been identified using fake PayPal alerts to exploit remote monitoring and management tools
Cybersecurity researchers issue warning over a surge in attacks designed to trick Facebook users into handing over login credentials
A new phishing campaign has been identified, delivering the Phantom information-stealing malware via an ISO attachment
Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide
The sophisticated campaign aims to steal credentials of sponsor license holders to facilitate immigration fraud, extortion and other monetization schemes
A new wave of phishing attacks exploiting Microsoft 365 OAuth tools has been observed impersonating diplomats to steal access codes
A global cryptocurrency phishing operation likely based in India or Sri Lanka has been stealing digital assets since at least 2022
Inferno Drainer returns, stealing millions from crypto wallets through phishing on Discord
Prolific PhaaS operation Darcula uses Magic Cat software to steal over 800,000 cards in a seven-month period
IBM warns of infostealer surge as attackers automate credential theft and adopt AI to generate highly convincing phishing emails en masse
New phishing method targets high-value accounts using real-time email validation