Global Phishing-as-a-Service Dismantled, Targeting Microsoft 365 Credentials
Phishing-as-a-Service proliferation enables widespread credential theft, posing immediate risk to user accounts and organizational data.
North Korean Hackers Deploy BeaverTail Malware via Fake Crypto Job Offers
A sophisticated social engineering campaign leverages fake job opportunities to distribute advanced malware, directly compromising user credentials and crypto wallets.
AI-Enhanced Phishing and Wallet Drainers Surge, Threatening Digital Assets
Sophisticated social engineering, amplified by AI, exploits human trust to compromise credentials and drain crypto wallets at an escalating rate.
Threat Actor LARVA-208 Targets Web3 Developers via Fake AI Platform Malware
Sophisticated spearphishing campaign delivers the Fickle infostealer via malicious 'audio driver' download, compromising developer credentials and project supply chains.
Open-Source Trading System Leaks User Private Keys and Exchange API Credentials
The compromise of an open-source trading system's integrity has exposed private keys and exchange API credentials, enabling total asset loss.
Thai Crypto Users Drained by Social Engineering Credential Theft Attack
Sophisticated social engineering bypassed centralized exchange security, enabling account takeover and asset liquidation via P2P markets.
Brazilian Crypto Investors Targeted by WhatsApp Social Engineering Malware
The Eternidade Stealer, a sophisticated banking trojan, weaponizes WhatsApp social engineering to steal user private keys and financial credentials.
Individual Bitcoin Holder Drained by Physical Coercion Home Invasion
The physical security layer remains the critical failure point; high-value targets face extreme, non-technical extortion risks.
New Phishing-as-a-Service Group Targets Web3 Wallet Token Approvals
The emergence of Eleven Drainer professionalizes social engineering, weaponizing malicious `permit` and `approve` calls to systematically sweep user-approved assets.
