logo

News related to
Fake

Paper Werewolf has expanded its campaign against Russian industrial, financial and transport organisations, using phishing emails, fake Adobe software updates and the EchoGather remote access trojan to deepen access inside targeted networks. The Russian-language threat cluster, also tracked as GOFFEE, was active in the March-April 2026 window with a toolset that shows a clear shift from conventional phishing toward layered intrusion chains. The latest campaign begins with […]

KnowBe4 has launched CAPY, a free online family cyber safety hub aimed at helping children, parents, older adults and everyday internet users build stronger defences against scams, phishing, cyberbullying, sextortion and AI-driven abuse. The programme, formally called Cyber Awareness Program for You, marks a shift by the Tampa Bay-based digital workforce security company from corporate training into a broader public education model. It arrives as online risks […]

Android users across parts of Europe face a sharper mobile-fraud threat after a redesigned TrickMo variant began targeting banking, fintech, cryptocurrency wallet and authenticator applications with stronger stealth, persistence and network-control features. The malware, tracked as TrickMo C, does not appear to be a wholly new family. It is an overhaul of a known Android banking trojan that has been under active development for years, with its […]

Mac users searching for Claude downloads are being targeted through sponsored Google results that lead to legitimate-looking Claude shared chats carrying malicious installation instructions, exposing a weakness in how trusted platforms can be misused to deliver malware. The campaign centres on users looking for Claude or Claude Code for macOS. Instead of relying only on fake websites, the attackers are placing paid search ads that display the […]

Arabian Post Staff -Dubai Dubai has cleared a regulated path for residents to pay government service fees using virtual assets, after Crypto. com’s UAE entity secured a Stored Value Facilities licence from the Central Bank of the UAE. The approval allows Foris DAX Middle East FZE, Crypto. com’s local entity, to activate its partnership with Dubai Finance and process payments for Dubai government fees through a framework […]

Attackers used a fake Hugging Face repository posing as an OpenAI privacy tool to spread credential-stealing malware to Windows users, exposing a widening security gap in the fast-growing market for open AI models. The repository, named Open-OSS/privacy-filter, climbed to the top of Hugging Face’s trending list and recorded about 244,000 downloads before access was disabled. Its model card closely mirrored OpenAI’s legitimate Privacy Filter project, a tool […]

Cybercriminals are using fake Claude Code installation pages to push a PowerShell-based information stealer at developers, marking a sharper turn in attacks that exploit the rush to adopt AI coding tools. The campaign impersonates Anthropic’s Claude Code, a command-line assistant used by software teams to write, review and debug code. Victims are drawn through sponsored search results or cloned documentation pages that resemble legitimate installation guides. Instead […]

Advertisements

Cybercriminals are exploiting interest in OpenClaw with a counterfeit installer that delivers a Rust-based information stealer designed to harvest cryptocurrency wallet data, browser secrets and password-manager credentials. The campaign centres on a fake OpenClaw download site and a typosquatted GitHub organisation that impersonates the legitimate open-source AI assistant project. Victims are lured into downloading what appears to be a Windows installer, but the archive instead contains a […]

German and Spanish police have shut down a revived version of Crimenetwork, the German-speaking dark web marketplace that had re-emerged within days of its 2024 takedown, arresting a 35-year-old German citizen at his home in Mallorca under a European arrest warrant. The suspect, from the Recklinghausen district in North Rhine-Westphalia, is accused of building and administering a new technical infrastructure for Crimenetwork after the original platform was […]

Fake DDR5 memory modules fitted with plastic dummy chips have surfaced in online hardware checks, raising fresh concern across PC component markets already strained by tight memory supply and rising prices. The counterfeit modules appear at first glance to resemble legitimate DDR5 sticks, carrying printed labels and layouts that imitate recognised brands. Closer inspection by hardware testers showed that the supposed DRAM packages were not functional silicon […]

Mac users searching for Claude installation help are being targeted by a malvertising campaign that turns Google-sponsored results and legitimate Claude shared-chat pages into a malware delivery route. The campaign, disclosed on 10 May by security researcher Berk Albayrak, uses search ads that appear to point to Anthropic’s real claude. ai domain. Users looking for terms such as “Claude mac download” are led to a shared Claude […]

Windows users seeking Claude-branded desktop tools have been targeted by a fake Anthropic-themed website distributing Beagle, a previously undocumented backdoor delivered through a DLL sideloading chain that gives attackers remote control over infected machines. The campaign used the domain claude-pro[.]com to imitate Claude’s official interface and lure visitors into downloading a supposed Claude-Pro Relay installer aimed at developers working with Claude Code. The fraudulent site copied the […]

Malaysia is weighing legal action against Meta Platforms after regulators found thousands of fake social media accounts using the names and identities of members of the country’s royal families, sharpening a confrontation between Putrajaya and global technology companies over online fraud and platform accountability. Communications Minister Fahmi Fadzil said the Malaysian Communications and Multimedia Commission would examine possible measures against the Facebook, Instagram and WhatsApp owner if […]

Hackers are exploiting demand for OpenClaw by circulating a counterfeit installer that delivers Hologram, a Rust-based information-stealing framework built to harvest credentials from crypto wallets, password managers and browser extensions. Security analysis of the campaign shows a polished fake installer site distributing an archive named OpenClawx64.7z. Inside it is OpenClawx64. exe, a bloated 130MB executable designed to appear legitimate while frustrating automated sandbox checks. The payload is […]

Fraudulent Android apps promising private call records for any phone number drew more than 7.3 million downloads on Google Play before being removed, exposing fresh weaknesses in app-store screening, digital payments oversight and consumer protection around subscription fraud. The 28 apps, tracked under the name CallPhantom, advertised access to call histories, SMS records and WhatsApp call logs, a service they could not legitimately provide. Users were asked […]

Cybercriminals are turning Vercel’s AI-assisted web development tools into a faster route for building convincing phishing pages, raising fresh concerns over how legitimate cloud platforms are being exploited to steal credentials and evade traditional email defences. Security analysts tracking the activity have identified a sharp rise in campaigns using Vercel-hosted pages to imitate widely recognised brands, including Microsoft, Spotify, Adidas, Ferrari, Louis Vuitton and Nike. The lures […]

Hackers are using sponsored Google search results to steal ManageWP credentials, raising fresh concerns over the exposure of agencies, developers and businesses that administer large fleets of WordPress websites through a single GoDaddy-owned dashboard. The campaign places a fraudulent advertisement above the legitimate ManageWP search result, copying the platform’s branding and directing users to a look-alike login page. Victims who search for ManageWP rather than typing the […]

Mac users are being targeted by a widening ClickFix campaign that disguises malicious commands as disk-cleaning and system-maintenance advice, turning routine troubleshooting into a route for credential theft, wallet compromise and cloud-data exposure. The attacks use pages that appear to offer help with storage optimisation, system clean-up or utility installation. Victims are instructed to copy commands into Terminal, or in some variants to trigger Apple’s Script Editor, […]

Cybersecurity teams are tracking a more capable strain of Salat Stealer, a Windows-focused malware family that has moved beyond routine credential theft into full remote access, surveillance and stealthy command-and-control activity. The Go-based tool, also tracked as WEB_RAT, combines the functions of an infostealer and a Remote Access Trojan. Its operators can harvest browser passwords, cookies, Telegram sessions, cryptocurrency wallet data and system details, while also opening […]

Cybercriminals are exploiting Microsoft’s Phone Link app to intercept text messages and one-time passwords from connected smartphones without installing malware on the phone itself, exposing a fresh weakness in cross-device authentication systems. The activity centres on CloudZ, a modular remote access trojan deployed on Windows machines, and a previously undocumented plugin called Pheno. The malware has been observed in an intrusion active since at least January 2026, […]

Microsoft has warned of a large-scale credential theft operation that used fake workplace compliance emails to target more than 35,000 users across over 13,000 organisations in 26 countries, underscoring how cybercriminals are refining corporate-style social engineering to bypass both human caution and automated defences. The campaign, observed between April 14 and 16, 2026, relied on emails that appeared to come from internal human resources, regulatory or conduct […]

Small US defence suppliers are being outmatched by nation-state hackers using poorly monitored network edges to gain long-term access before attacks become visible, new cyber threat analysis has warned. Team Cymru senior threat intelligence adviser Stephen Campbell said smaller companies inside the US Defense Industrial Base face a structural disadvantage because many hold sensitive contract, technical and personnel data but lack the network-level visibility available to major […]

  Microsoft detected about 8.3 billion email-based phishing threats in the first quarter of 2026, exposing a sharp shift in attacker behaviour as criminal groups moved deeper into QR codes, fake CAPTCHA pages, phishing-as-a-service kits and file-based payloads to bypass conventional email defences. The volume eased from about 2.9 billion threats in January to 2.6 billion in March, but the decline in headline numbers masked a more […]

  More than 30,000 Facebook accounts have been compromised in a large phishing operation that exploited trusted internet services to make fraudulent messages appear legitimate, sharpening concerns over how cybercriminals are turning mainstream cloud tools into delivery channels for account theft. Cybersecurity researchers have identified the campaign as AccountDumpling, a Vietnamese-linked operation aimed largely at Facebook Business users, page administrators and account operators. The attackers used Google […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
UAE authorises Ultomiris for additional kidney disease treatment // WellEra and Capella Bring Together the Science of Wellness and the Art of Hospitality at Thailand’s First Capella-Branded Residences // Auto, taxi unions go on strike // Saudi, Qatari and Kuwaiti sukuk lead Gulf liquidity // High Court strikes down police curbs on hotel night life // Malaysia Airlines Secures Major Accolades for Service and MICE Offering // BJP complaint against Murali over Vande Mataram // Dubai leads investment preferences in UAE residents survey // CPM wants abandoned power deal probed // Etisalat sweeps UAE mobile network awards fourth time // Microsoft challenges proposed US restrictions on Chinese optical components // Turla malware intercepts NATO and EU government correspondence // Nvidia presents GR00T 2 for demonstration-trained robot tasks // House Republicans divert Hegseth impeachment resolution to committee // Panasonic Singapore Brings Back Highly Anticipated Japan Tour Lucky Draw // Helsing prepares Berlin debut for military targeting software // OpenAI quarterly sales reach $10 billion as losses widen // Fake Cloudflare checks conceal malware within PNG images // South Korea levies unprecedented penalties on bond auction dealers // Samsung achieves 17-second chip simulation using Nvidia processors //