Microsoft and Proofpoint executed a CoGUI phishing kit takedown, seizing domains from YAM Store and Iron Man after 1B scam messages hit 75,000 firms. Related Posts: Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests DOJ Charges Engineer After OpenAI Recording Device Arrest DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies The post Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man appeared first on Da

UAT-11985 used AI-written lures and an AitM phishing kit in a Taiwan spear-phishing campaign that steals Google logins and bypasses MFA. Related Posts: Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF and ROOFDECK The Devastating Ledger Security Breach The Reality of Ransomware Recovery Services The post UAT-11985 Uses AI-Written Lures and an AitM Phishing Kit Against Taiwan Researchers appeared first on Daily CyberSecurity.

Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.

Group-IB says scammers are targeting Céline Dion fans through Facebook, duplicate digital tickets and fake websites impersonating Ticketmaster, AXS and the venue site.

A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. While…