Latest cybersecurity reporting from selected sources.

Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims

Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world

UK, US and Canadian authorities have identified over 20,000 victims of approval phishing scams that trick users into handing over full crypto wallet access

Threat actors posing as IT support teams use phishing kits to generate fake login sites in real-time to trick victims into handing over credentials

RedVDS cyber-crime-as-a-service platform powering phishing, BEC attacks and other fraud has cost victims millions

Abnormal AI said the campaign, which lures victims into downloading legitimate RMM software, marks a major evolution in phishing tactics

Cyber-attacks using HijackLoader and DeerStealer have been identified exploiting phishing tactics via ClickFix

Prolific PhaaS operation Darcula uses Magic Cat software to steal over 800,000 cards in a seven-month period

CrowdStrike warned it had observed a phishing campaign impersonating the firm’s recruitment process to lure victims into downloading cryptominer

North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials

A new phishing attack uses corrupted Word docs to bypass security, luring victims with fake payroll and HR emails

CERT-UA said the phishing campaign lures victims into downloading malware used to exfiltrate files containing sensitive personal data

SlashNext said the method deceives ML systems to deliver phishing messages into victims’ inboxes

Some 57,000 victims lost $47m in phishing scams targeting their cryptocurrency last month

Adversaries targeting EU-based victims increasingly leverage EU affairs in spear phishing attacks, CERT-EU found

Romance scammers have used the technique to great effect in recent years

Researchers warn of phishing links leading to spoofed Google Play pages

Victims were targeted by follow-on phishing attacks

Individual allegedly used phishing website to harvest victim credentials

Latest victims of smishing attacks are UAE residents