Tag: Abuse
-
ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families
A page asking you to prove you are human can be the first step in a malware infection. Malwarebytes says multiple campaigns active since at …
-
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident …
-
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
The internet did not break this week. It got used exactly as designed, which is …
-
Attackers Abuse Shared Content for ChatGPT Phishing Campaign
Threat actors are delivering malware from phishing pages hosted on legitimate ChatGPT domains, Push Security has warned. The vendor claimed …
-
Government Backed Hackers Abuse Cloudflare in Malaysian Espionage Campaign
A campaign linked to a suspected Malaysian government operation has been using hidden command and control infrastructure for years, …
-
Hackers Abuse GitHub Actions And SLSA Signing To Spread Malware Across Open Source Ecosystems
A coordinated “Mini Shai-Hulud” campaign compromised over 170 open-source NPM and PyPI packages by abusing GitHub Actions, OIDC trust, …
-
Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts
Hackers abused Google AppSheet to send Meta phishing emails, compromising 30,000 Facebook business accounts across 50 countries. The post …
-
Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks
Cybersecurity researchers are warning of two cybercrime groups that are carrying out “rapid, high-impact attacks” operating almost within …
-
Hackers Abuse Robinhood Signup Process to Deliver Phishing Emails
Robinhood fixed an account-creation flaw that hackers abused to send convincing phishing emails from its own system to some users over the …
-
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small …
-
Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks
A “novel” social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access …
-
Mailbox Rule Abuse Emerges as Stealthy Post-Compromise Threat
Security researchers have identified a surge in the misuse of mailbox rules within Microsoft 365 environments, with attackers increasingly …
●●●