Hackers posing as trusted messaging and communications services have mounted a sustained surveillance campaign across the Middle East and North Africa, using fake app pages, phishing domains and a custom Android spyware known as ProSpy to target journalists, activists and political figures, according to a joint body of research published this week by Lookout, Access Now and SMEX. The operation, active since at least 2022 and documented […]
A Microsoft-tracked cybercrime group is using adversary-in-the-middle techniques to hijack Microsoft 365 sessions, bypass multifactor authentication and reroute employee pay into attacker-controlled bank accounts, in what researchers describe as a geographically focused campaign against users in Canada. Microsoft said the actor, tracked as Storm-2755, combined search-result poisoning, fake sign-in pages and session replay to move from account takeover to payroll fraud, causing direct financial loss for at […]
A cross-border espionage campaign that targeted journalists, civil society figures and some government-linked entities across the Middle East and North Africa between 2023 and 2024 has been tied by researchers to BITTER, a long-tracked South Asian threat actor, marking what investigators describe as the first documented case linking the group to attacks on civil society in the region. The attribution remains qualified rather than definitive: Lookout said […]
Google has warned that a financially motivated cyber group tracked as UNC6783 is targeting business process outsourcers and corporate helpdesks in a campaign aimed at stealing sensitive data from large companies and then using that access for extortion. The group, which Google says may be tied to the “Raccoon” persona, has targeted several dozen high-value organisations across multiple sectors, shifting attention to a weak point that many […]
STX RAT, a newly identified remote access trojan, has drawn attention in the cyber-security sector after researchers tied it to an attempted intrusion against a financial-services environment and linked it to broader opportunistic delivery campaigns that include trojanised software and script-based loaders. The malware stands out because it combines hidden remote control with data theft, while delaying some of its most suspicious behaviour until it has an […]
Attackers have planted a stealthy Magecart credit-card skimmer on nearly 100 Magento-based online shops by hiding the malicious code inside an invisible SVG image, according to incident findings published this week, in what security specialists describe as another sign that payment-page attacks are becoming harder for merchants and scanners to detect. The operation was identified on April 7 and affected 99 stores, with stolen payment data sent […]
Atomic Stealer operators have opened a fresh lane into Apple computers by shifting a popular ClickFix scam away from Terminal and into Script Editor, a built-in macOS tool that many users would regard as less suspicious. The change matters because Apple moved in March to add stronger friction around Terminal-based copy-and-paste attacks in macOS Tahoe 26.4, and threat researchers now say attackers have adapted within weeks rather […]
What used to be dismissed as internet oddity is moving into the mainstream of fraud prevention, platform regulation and organised crime analysis: the distinction between sock-puppet accounts and catfishing is no longer academic. Authorities, platforms and researchers are increasingly treating fake digital personas as a wider security and financial risk, particularly as artificial intelligence makes them cheaper to create, easier to scale and harder for ordinary […]
Drift Protocol has said the theft of about $270 million to $286 million from its platform was the result of a six-month operation by North Korea-linked actors who built trust slowly, posed as a legitimate trading firm and used face-to-face meetings, capital deposits and carefully timed social engineering to prepare the strike. The Solana-based exchange’s account adds a new layer to an attack that security researchers had […]
Artificial intelligence is lowering the cost of cyberattacks across the digital-asset industry and forcing crypto firms to rethink how they protect users, wallets and transaction systems, according to Ledger chief technology officer Charles Guillemet, whose warning lands as the sector grapples with a fresh cycle of major breaches and more sophisticated fraud. Guillemet said AI is making hacks “cheaper and faster”, amplifying a security problem that has […]
Attackers behind the compromise of the widely used Axios package have widened their campaign, turning from code repositories to the people who maintain them and exposing how a single deceptive approach can threaten vast stretches of the software supply chain. Security researchers and the Axios maintainer’s own post-mortem show the March 31 breach was not an isolated package hijack but part of a co-ordinated social-engineering operation aimed […]
Drift, one of Solana’s larger decentralised finance trading platforms, said it was facing an “active attack” on April 1 and moved to suspend deposits and withdrawals as hundreds of millions of dollars appeared to leave the protocol, deepening concern over operational security risks in crypto markets. The platform told users not to deposit funds and said it was working with security firms, bridges and exchanges to contain […]
Google’s YouTube is facing mounting pressure from child development experts and advocacy groups to stop artificial intelligence-generated videos from being shown or recommended to young children, opening a fresh front in the debate over how large platforms police automated content aimed at minors. A coalition led by Fairplay has urged YouTube chief executive Neal Mohan and Alphabet chief executive Sundar Pichai to keep such material off YouTube […]
Security teams are scrambling after two malicious releases of the Telnyx Python SDK were uploaded to PyPI on March 27, turning a widely used developer tool into a credential-stealing backdoor that could execute as soon as the library was imported. The compromised versions, 4.87.1 and 4.87.2, were published at 03:51 UTC and quarantined by 10:13 UTC, leaving a window of a little over six hours in which […]
Apple has added a new safeguard in macOS Tahoe 26.4 that warns users before potentially dangerous text is pasted into Terminal, a move aimed at disrupting ClickFix-style scams that trick people into infecting their own devices. The feature appears in the latest macOS release even though Apple’s public feature summary for version 26.4 does not spell it out directly, while the company’s broader security pages confirm 26.4 […]
EvilTokens, a newly identified phishing-as-a-service operation, is offering cybercriminals a ready-made way to hijack Microsoft accounts by abusing a legitimate sign-in process rather than stealing passwords through fake login pages. The service centres on Microsoft’s device code flow, a method designed for televisions, printers and other input-constrained devices, and researchers say the toolkit has been active since the middle of February. What makes the platform notable […]
A newly documented BlankGrabber infection chain is using a bogus “certificate” loader to disguise a multi-stage Windows compromise, adding another layer of deception to a commodity stealer already known for targeting browser credentials, crypto wallets and messaging sessions. Security researchers say the campaign abuses certutil. exe, a legitimate Windows utility, to make malicious code appear routine, while later stages rely on Rust, Python and packed archives to […]
Artificial intelligence is emerging as the defining battleground in global cybersecurity, with defenders racing to counter increasingly sophisticated threats as cyber criminals adopt the same technologies to scale and sharpen their attacks. A report by PwC highlights how malicious actors are integrating AI into core operations, enabling even relatively inexperienced hackers to launch complex campaigns that once required advanced technical expertise. The shift is altering the threat […]
A surge in cryptocurrency fraud is being fuelled by coordinated social media campaigns that weaponise geopolitical tensions and political uncertainty, according to blockchain investigator ZachXBT, who has identified networks of accounts spreading misleading narratives to lure victims. The analyst has reported that clusters of accounts on X, formerly Twitter, are amplifying alarmist posts tied to conflicts and elections, using emotionally charged messaging to drive engagement. These posts […]
OpenAI has moved to shut down its experimental social media platform Sora following mounting scrutiny over the misuse of AI-generated video, including the creation of non-consensual content and increasingly convincing deepfakes that alarmed regulators, creatives and digital safety advocates. The decision comes after months of debate surrounding the rapid adoption of generative video tools, with Sora gaining traction for its ability to produce short-form clips from simple […]
Cybercriminals are exploiting the popularity of artificial intelligence tools by distributing fake ChatGPT-themed Android applications designed to steal user credentials and compromise social media accounts, according to cybersecurity researchers tracking a coordinated phishing campaign. The operation centres on abuse of Google’s Firebase App Distribution platform, a legitimate service used by developers to test applications before public release. Attackers are leveraging the platform to send invitation-style emails that […]
Malicious actors are exploiting search engine rankings to distribute trojanised software installers that deploy the AsyncRAT remote access tool, in a campaign that has expanded steadily since October 2025 and now targets more than two dozen widely used applications. Security analysts tracking the operation say attackers are manipulating search optimisation techniques to push fraudulent download portals to the top of results pages, increasing the likelihood that unsuspecting […]
A man has admitted orchestrating a large-scale fraud that used artificial intelligence to generate songs and automated bots to stream them on digital platforms, earning more than $8 million in illicit royalties, according to prosecutors. Michael Smith, 52, entered a guilty plea in a United States federal court to charges linked to wire fraud and money laundering after authorities uncovered what they described as one of the […]
Elon Musk has been found by a jury to have misled Twitter investors during his 2022 takeover bid, concluding that his public statements about the social media platform contributed to financial harm for shareholders as he pursued a lower acquisition price. The verdict centres on claims that Musk, while negotiating the $44 billion deal to acquire Twitter, publicly criticised the company’s handling of spam and bot accounts […]
