Bluesky Phishing Attack Compromised More Than 4,500 Accounts
Bluesky confirmed a phishing attack involving a fake government payment offer. It temporarily suspended the affected accounts.
Tag phishing
Microsoft and Health-ISAC Disrupt YAM Store, CoGUI and Iron Man Infrastructure
Microsoft and Health-ISAC obtained court approval to seize and redirect domains associated with the YAM Store marketplace and the CoGUI and Iron Man phishing kits.
ASOS Confirms Data Breach Following Social Engineering
ASOS said an attacker obtained an employee’s login credentials by impersonating a trusted contact. The attacker then accessed data on certain third-party platforms.
TA419 Phishing: Group Targeted US AI Policy Experts
Proofpoint described a TA419 phishing campaign targeting US AI policy experts. The attackers used fake professional outreach and proxy-based Microsoft 365 sign-in.
Microsoft Warns of Phishing Abusing MSP360 RMM and ScreenConnect
Microsoft analyzed phishing campaigns in which attackers delivered a signed MSP360 RMM installer and then deployed ConnectWise ScreenConnect for more persistent remote access.
Ronald Spektor Sentenced to Up to 12 Years for Fraud Against Coinbase Users
Ronald Spektor was sentenced to four to 12 years for a scheme in which he posed as a Coinbase employee and allegedly defrauded approximately 100 people of nearly $16 million in cryptocurrency.
Microsoft Disrupts EvilTokens Phishing Service
Microsoft and its partners disrupted EvilTokens infrastructure that, according to the company, helped attackers access email inboxes through phishing abuse of the device code flow.
Helpfeel Confirms Leak of 23.62 Million Gyazo Records
Helpfeel confirmed the unauthorized exposure of millions of records from Gyazo after a vulnerability in the image upload server was exploited.
Possible GSS Data Leak After VPN Vulnerability Exploited in Japan
Japan’s Digital Agency is investigating the possible leak of approximately 246,000 records from the government’s GSS service after a VPN device vulnerability was exploited.
Microsoft Warns of Passkey-Themed Phishing and Cloud Identity Compromise
Microsoft has recorded active intrusions into cloud accounts in which attackers exploit phone calls and text messages with urgent requests to change a passkey or MFA.