An Amazon ClickFix campaign uses a fake CAPTCHA and the old Windows finger command to drop Lumma Stealer and NetSupport. Stay protected.

Related Posts:

• uCreator Android Spyware Hooks Telegram and WeChat Inside Virtual Containers
• Skynet LLMjacking Agent Hijacks Exposed AI Models to Hack Servers and Mine Crypto
• INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors

The post Amazon ClickFix Campaign Abuses Windows Finger Command to Drop Lumma Stealer and NetSupport appeared first on Daily CyberSecurity.

Hackers abused a SkyKick API secret in a ConnectWise Cloud Backup breach, accessing 300+ Microsoft 365 tenants and planting rogue app credentials.

Related Posts:

• Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms
• Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe
• UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering

The post Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants appeared first on Daily CyberSecurity.

Huntress uncovers a WatchGuard VPN phishing campaign where a WatchGuard VPN phishing site steals logins twice before serving the real client.

Related Posts:

• GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps
• Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies
• CodeAudit AI VS Code Extension Captures Developer Source Code in the Background

The post Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer appeared first on Daily CyberSecurity.

A Power BI phishing campaign uses Microsoft's real domain to install rogue ScreenConnect clients. Learn how it works and how to block it.

Related Posts:

• 16 Fake Rabby and OKX Firefox Extensions Stole Crypto Wallet Recovery Phrases
• The Silent Threat of Midnight Mimosa Malware
• Rogue AI Agents Hijacked urlquery Scan Browsers to Reach Russian Bankruptcy Records

The post Phishing Campaign Abuses Microsoft Power BI to Install Rogue ScreenConnect Clients appeared first on Daily CyberSecurity.