ThreatVectr
Tag

#phishing

140 stories taggedphishing · page 7 of 10.

Full-frame photoreal editorial image of a dimly lit open-plan office at night, rows of monitors glowing with cascading padlock icons and encrypted file symbols,
Ransomware

Meet Avalon: The Swiss-Army Malware That Ends in Ransomware

A newly documented toolkit called Avalon steals passwords, spreads across networks, and locks up files — all from one phishing email.

3 min read
Photoreal editorial shot of a dimly lit modern office desk at night, a laptop screen glowing with a generic blurred sign-in form, a smartphone beside it showing
Identity & Access

New Phishing Kit 'ARToken' Exposes Full Microsoft 365 Takeover Playbook

Cisco Talos researchers found more than 80 hidden commands inside a phishing service tied to the EvilTokens platform — including tools to steal Microsoft 365 logins, read mailboxes, and quietly hide their tracks.

4 min read
16:9 editorial photograph, full-frame edge-to-edge, of a hotel front-desk computer monitor glowing in a dimly lit reception area at night, the screen displaying
Threat Intelligence

Fake Guest Photos Are Handing Hackers Long-Term Access to Hotel Networks

Two separate campaigns are targeting hotel front desks and booking teams with booby-trapped zip files dressed up as guest photographs — and the goal isn't a quick smash-and-grab. It's a quiet, lasting foothold.

3 min read
Macro photograph of a glowing network of interconnected nodes on a dark surface, with several nodes pulsing amber-red to suggest hidden danger within an otherwi
AI Security

AI Assistants Are Inventing Fake Web Addresses — and Criminals Are Buying Them Up

Researchers at Palo Alto Networks found that AI tools routinely make up plausible-sounding website addresses that don't exist. Criminals are registering those addresses before anyone notices — and one already built a full fraud operation using the same AI trick.

4 min read
Extreme close-up of a glowing laptop screen in a dim office, displaying a realistic login page, with a faint ghostly reflection of the same page morphing into a
Threat Intelligence

Phishing Emails Now Study Your Phone Before They Attack You

A new wave of scam emails quietly profiles your device — your operating system, location, and screen size — then delivers malware tailored specifically to your setup.

3 min read
A plain official-looking envelope resting on a wooden desk, partially open, with a single folded letter visible inside
Ransomware

Fake Interpol Arrest Notices Are Delivering Ransomware to Small Businesses

Criminals are impersonating the international police agency to frighten small business owners into downloading malware. The tactic is simple. It's working.

3 min read
Aerial 16:9 editorial photograph of an offshore oil and gas drilling platform at dusk, surrounded by calm dark ocean water, small warning lights glowing amber o
Threat Intelligence

Chinese Spy Group Lures Energy Workers With Fake Australian News Site — Then Steals Everything They Type

A state-linked hacking group spent two months tricking employees at offshore energy companies into visiting a bogus news website that silently recorded their every keystroke.

3 min read
A close-up photoreal shot of a smartphone screen at night showing a generic green messaging app icon with a red notification badge, sitting on a dark wooden des
Threat Intelligence

US warns Russian spies are still hunting your WhatsApp and Signal accounts

CISA and the FBI say Russian intelligence officers are running fresh phishing campaigns to hijack accounts on messaging apps used by journalists, officials and activists.

3 min read
Aerial 16:9 editorial photograph of a busy international airport terminal, shot from above at dusk, warm amber lighting illuminating rows of empty check-in desk
Threat Intelligence

TA558 Is Back, Targeting Hotels and Airlines With Fake Booking Emails

A criminal group that has quietly stolen travel-industry data since 2018 has dramatically ramped up its fake-reservation campaigns, now using compressed file tricks to sneak spying software onto victims' computers.

3 min read
A digital illustration showing a phishing attack with a fake login page on a smartphone screen, depicting a large network of connected corporate logos in the ba
Identity & Access

0ktapus Phishing Campaign Hits 130 Companies, Compromising Nearly 10,000 Accounts

A widespread phishing attack targets employees of Twilio and Cloudflare, exploiting Okta's authentication system.

2 min read
Photoreal editorial close-up of a laptop screen showing a generic blurred cloud sign-in prompt, a translucent glowing link being dragged across the screen by a
Identity & Access

Drag, Drop, Hijacked: How 'ConsentFix' Steals Microsoft 365 Sessions in Seconds

A new twist on the ClickFix trick turns Microsoft's own sign-in prompts into a session-theft machine — and a step-by-step guide is now circulating on a Russian crime forum.

4 min read
A computer screen displaying a warning message about data breach, in an office environment, with student loan documents scattered on a desk in the foreground
Identity & Access

Nelnet Data Breach Exposes 2.5 Million Student Loan Records

A vulnerability in Nelnet's loan servicing system exposed personal data. Here's what that means for borrowers.

2 min read
Threat Intelligence

Ousaban Resurfaces in Iberia, Hiding Bank-Stealer Payloads Inside Images

A Brazilian trojan pivots to Spanish and Portuguese banking customers, using geofenced PDF lures and steganography to bury its real payload.

3 min read
Threat Intelligence

Phantom Squatting: When Attackers Camp on the Domains LLMs Hallucinate

Unit 42 documents a pre-positioning tactic where actors register non-existent domains that chatbots keep suggesting, then wait for the traffic to arrive.

2 min read
Threat Intelligence

FIFA 2026 Fraud Infrastructure Was Pre-Staged Months Before Kickoff, Researchers Say

A Check Point exposure report documents pre-positioned phishing kits, lookalike domains and multilingual scam pages built well ahead of the June 11 opening match.

2 min read
© 2026 Threat Vectr