Fake FedEx Tax Invoice Emails Are Dropping a Memory-Only Backdoor That Blinds Windows Defenses
A phishing campaign impersonating FedEx billing notices is delivering a newly documented, largely fileless backdoor called Sirius that patches Windows' own security logging to evade detection. Once installed,...
Microsoft Teams Is Getting AI That Reads the Conversation, Not Just the Links, to Catch Phishing
Microsoft plans to roll out AI-driven phishing detection inside Teams that analyzes the context of a conversation — not just suspicious links or attachments — to catch impersonation...
Lookalike Microsoft Teams Domain Caught Harvesting Employee Login Credentials
Researchers have flagged a newly registered domain, teams-cloud[.]live, that closely mimics the Microsoft Teams sign-in page and interface to trick employees into handing over their credentials. One subdomain...
Inside Help TDS: The Scam Network Turning 20,000 Cloudflare Pages Into Fake Microsoft Alerts
A tech-support scam operation dubbed Help TDS has cycled through more than 20,000 disposable Cloudflare Pages domains over six months, using fake Microsoft lockout warnings to funnel victims...
Inside Iron Man System: The Phishing-as-a-Service Platform Behind a Billion Fake Emails
Researchers have linked a Chinese-run phishing platform called Iron Man System to roughly one billion phishing emails targeting 75,000 organizations, powered by a library of over 2,300 brand-impersonation...
Fake WatchGuard VPN Download Page Steals Credentials, Then Hands Over the Real Installer
A phishing site impersonating WatchGuard's VPN software portal harvested login credentials through a fake prompt before quietly delivering the genuine, digitally signed installer, a technique designed to leave...
Fake Zoom and PDF Installers Deploy Dual Remote-Control Tools on Business PCs
A phishing campaign disguises legitimate MSP360 remote-management software as Zoom installers, PDF readers and business documents. Once installed, it adds ScreenConnect as a second access channel and delivers...
Knockoff ‘Jev AI’ Storefronts Are Charging Up to 11x Markup — And Quietly Routing Your Prompts Through Someone Else’s Servers
Within days of the Jev AI model's public launch, scammers registered lookalike storefronts that resell legitimate API access at inflated prices while funneling every prompt through third-party infrastructure...