RMM Tools Hijacked in Stealthy Phishing Campaign
Over 80 organizations hit as attackers abuse legitimate RMM tools to bypass security. The campaign leverages trusted software for undetected access. Details from May 05, 2026.
Over 80 organizations hit as attackers abuse legitimate RMM tools to bypass security. The campaign leverages trusted software for undetected access. Details from May 05, 2026.
Over 1,600 phishing messages from China-linked Silver Fox APT targeted India and Russia in tax-themed attacks delivering new malware. Details emerged May 04, 2026.
OpenAI rolls out Advanced Account Security on May 01, 2026, targeting developers and high-risk users concerned about phishing. Measures include mandatory MFA and login alerts. Details from Wired.
Free Gmail accounts are being exploited to send 46% of commercial spam, bypassing filters and fueling global phishing campaigns. Here’s how it works.
The Bluekit phishing service offers 40+ templates and AI-generated drafts to streamline attacks. It’s now selling on underground forums. April 30, 2026.
Attackers abused Robinhood systems to send convincing phishing emails on April 29, 2026. Users were directed to fake sites mimicking official login pages. Details from SecurityWeek.
A Chinese national posed as a U.S. researcher to spear-phish NASA employees and others for sensitive defense software data as of April 26, 2026. Details from the OIG report reveal systemic vulnerabilities in federal cybersecurity hygiene.
Tylerb, a top Scattered Spider hacker, pleaded guilty in April 2026 to wire fraud and identity theft tied to $8M in crypto thefts. Details emerge on tactics and fallout.