ThreatVectr
Tag

#phishing

172 stories taggedphishing · page 7 of 12.

A corporate office environment where a single login credential entry on a monitor suddenly grants access to multiple department folders and systems across the s
Identity & Access

SSO Is the New Skeleton Key. Criminals Have Noticed.

One stolen single sign-on password can hand attackers the run of a company. Here's how the break-ins work and what actually stops them.

4 min read
A laptop screen showing an attacker's session still active in an email inbox even after a user has reset their password, demonstrating a persistent session toke
Identity & Access

Changing Your Password No Longer Kicks Hackers Out

A growing wave of attacks steals not passwords but the digital passes that keep you logged in, meaning a password reset leaves the intruder sitting comfortably inside your account.

4 min read
A desktop computer screen showing a fake Microsoft Teams update notification window overlaid on top of legitimate system windows, with a bogus progress bar load
Threat Intelligence

Fake Microsoft Teams Update Pushes Remote-Control Tools onto Victims' PCs

A phishing run tracked as Operation BlueDash uses a bogus 'secure document' lure and a counterfeit Microsoft Store page to install legitimate remote-access software on target machines.

4 min read
An inbox overflowing with official-looking income tax notification emails, with a malware payload invisibly embedded in one highlighted message
Threat Intelligence

Cruciferra: The Malware-Hiding Service Fuelling Attacks on Indian Taxpayers

A China-linked group is paying for a tool called Cruciferra to smuggle remote-access malware onto Windows machines, with fake income tax emails as the entry point.

3 min read
Real-time security monitoring dashboard showing live login activity, with a fake insurance company login page displayed on one screen and rapid cursor movements
Threat Intelligence

Insurance phishing gets faster: attackers now hijack accounts in real time

Researchers say fake insurance login pages are being run live, with criminals stepping in the moment a victim types their password.

4 min read
Hotel lobby with business travelers at the front desk and in seating areas, Wi-Fi network selection screen on a laptop showing spoofed networks, fake Microsoft
Threat Intelligence

Hotel Wi-Fi hijack campaign quietly harvests Microsoft 365 logins from business travellers

A cluster with overlapping infrastructure tied to Russia-linked APT28 activity is tampering with DNS on hotel and conference Wi-Fi gateways to funnel guests into fake Microsoft login pages, ReliaQuest reports.

4 min read
Cyber-attack command center aesthetic with multiple monitors displaying fake Zoom and Microsoft Teams landing pages, cryptocurrency wallet monitoring tools, and
Threat Intelligence

North Korean Hackers Run Fake Zoom and Teams Sites to Rob Crypto Wallets

BlueNoroff's phishing kit screens visitors' crypto wallets before deciding who gets the malware, researchers say.

4 min read
Modern startup office environment with security professionals at workstations, AI model training visualizations displayed on screens, phishing email samples bei
AI Security

AegisAI Raises $36 Million to Fight AI-Generated Phishing Emails

A startup built by former Google security engineers says criminals now use artificial intelligence to craft personalised fake emails at scale. Its answer is an AI system that reads those emails back.

3 min read
A smartphone screen displaying a fake Snapchat support message asking for login verification codes, with the victim's confused face partially visible in the pho
Threat Intelligence

Illinois man gets 76 months for phishing 750 women's Snapchat accounts

Kyle Svara, 26, tricked victims into handing over login codes by posing as Snap staff, then stole nude photos and traded them online.

4 min read
A dark web marketplace interface displayed on multiple monitors, with malware builder tools and freshly packaged software packages arranged in an organized list
Threat Intelligence

Golden Chickens Malware Crew Returns With Four New Tools

The criminal group behind a long-running malware-as-a-service operation has rolled out fresh code, including a stripped-down loader and a browser password stealer.

4 min read
A Microsoft Teams chat window with hundreds of unread phishing messages flooding across the screen simultaneously, while a timeline graph beside it shows a shar
Threat Intelligence

After Tycoon2FA Was Shut Down, Phishing Criminals Went Looking for New Tricks

Microsoft's Q2 2026 email threat report shows that busting a major phishing-for-hire service slashed attack volume by 92%, but criminals quickly pivoted to Microsoft Teams chats and automated campaigns that hit tens of thousands of organisations in hours.

4 min read
A Windows desktop showing Chrome and Edge browser windows running invisibly in the background taskbar while a user works normally, command signals flowing throu
Ransomware

Chaos ransomware crew hides its remote control tool inside your own browser

A new backdoor called msaRAT launches Chrome or Edge in the background and pipes attacker commands through it, so no direct link to the criminal server ever appears on the network.

4 min read
Portuguese bank statements and account records showing gradual unauthorized transfers, a computer screen displaying the same banking malware code that has remai
Threat Intelligence

A Six-Year-Old Brazilian Bank Fraud Tool Is Still Emptying Portuguese Accounts

Lampion has barely changed since 2019. It doesn't need to. Portugal keeps falling for it.

4 min read
An office scene showing a person at a desk receiving a phone call while looking at a suspicious email, with thought bubbles and visual cues indicating manipulat
Threat Intelligence

What is social engineering? A plain-English guide

Social engineering is the art of manipulating people, not machines, to hand over access, money, or data. Here is how it works and how to stop it.

4 min read
A smartphone and laptop side-by-side both displaying different authentication factor prompts—one showing a biometric scan and the other showing a time-based cod
Identity & Access

What is multi-factor authentication and why does it matter?

MFA blocks the vast majority of automated account takeovers, even when your password is already stolen.

4 min read
© 2026 Threat Vectr