Microsoft has disrupted EvilTokens, a phishing-as-a-service platform that was linked to more than 12,000 compromised email inboxes across more than 10,000 organizations worldwide. The service used device-code phishing to gain access to Microsoft accounts and then used AI-powered tools to analyze compromised mailboxes and help attackers identify opportunities for further fraud. The operation highlights how […]
Cybercriminals don’t usually make a habit of attacking each other in public. That changed this week when ShinyHunters claimed it had breached the dark web operation of rival group cl0p and taken control of its website. The alleged takeover happened on September 18. ShinyHunters told Reuters that it had found a vulnerability in cl0p’s software […]
The UK, US and Netherlands have issued a warning of Iranian spyware targeting dissidents. The middle eastern nation has been accused of utilizing cyber activities targeting Iranian critics of the regime. The Netherlands’ AIVD intelligence service, Britain’s National Cyber Security Centre and the FBI in the US issued coordinated advisories. Modus Operandi The hackers used […]