/
ttps_attack:T1566.002 × latest_source_host:welivesecurity.com × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

welivesecurity.com · medium

Brand deal scam impersonating Hollyland, Nike and Spotify hijacks YouTube creators' Google accounts

A modular phishing campaign targets YouTube creators with personalized sponsorship offers from fake brand representatives. One variant impersonates Hollyland, a maker of wireless video transmission equipment, and also Nike and Spotify. Victims are led through a convincing fake collaboration platform to a bogus "Sign in with Google" page t…

welivesecurity.com · medium

Phishing evolves: QR codes, ConsentFix OAuth token theft, ClickFix variants and deepfake-enabled fraud defeat traditional red-flag training

ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…