/
ttps_attack:T1583.001 × criticity:medium × limpar

Resultados

8 casos · pág. 1/1

olhardigital.com.br · medium

Fake WatchGuard download site harvests VPN credentials from MSP admin before serving legitimate signed installer

Huntress researchers identified a fake page impersonating the WatchGuard download portal that harvested VPN server addresses, usernames and passwords before offering the legitimate Mobile VPN with SSL installer. The investigation began after suspicious activity involving an administrator at a managed service provider (MSP), who found the …

newsroom.trendmicro.com · medium

Trend Micro exposes global 'task scam' industry: fake job platforms drain victims via escalating crypto deposits

Trend Micro published research (Unmasking Task Scams) on task scams, a fast-growing fraud model in which fake online job offers lure victims into repetitive, gamified digital tasks and then extract funds through escalating deposit demands. Operators impersonate legitimate staffing firms and digital marketing agencies and use SMS, WhatsApp…

blog.checkpoint.com · medium

Check Point uncovers multi-region phishing infrastructure hiding live campaigns behind blank 404 pages across thousands of rotating domains

Check Point Exposure Management researchers uncovered a large, multi-region phishing infrastructure that conceals active campaigns behind domains that look inactive. Root domains return blank or generic "Not Found" pages, while the phishing content is served only through concealed regional paths (for example /it, /de, /pa) and under speci…

infosecurity-magazine.com · medium

Microsoft disrupts Yam Store PhaaS network (Storm-3119/Storm-2990) behind over one billion phishing messages since January 2026

Microsoft, working with industry partners and Japanese police, disrupted a Chinese-language phishing-as-a-service (PhaaS) ecosystem centered on Yam Store, an underground marketplace tracked as Storm-3119. The phishing kits sold there were responsible for over a billion phishing emails and texts sent to more than 75,000 organizations since…

infoblox.com · medium

Hotejka (ex-ROI777) runs Help TDS tech support scam network using thousands of disposable Cloudflare Pages domains

Infoblox attributes the long-running Help TDS traffic distribution system, active since at least April 2017, to Hotejka, a small Russian-language affiliate program that appears to be a rebrand of ROI777 (exposed in 2018). The TDS fingerprints visitors and redirects them to browser-lock tech support scams that push victims to call centers,…

blog.checkpoint.com · medium

Election scams blur with genuine campaign outreach ahead of 2026 US midterms, with phishing, spoofing and exposed election-staff credentials

Check Point Exposure Management reports that fraudulent voter-registration messages and legitimate political outreach are converging ahead of the 2026 US midterms, making it harder for voters to tell real messages from fake ones. Between July and September, election offices in Rhode Island and Washington warned of fake emails and texts as…

blog.checkpoint.com · medium

Q3 2026 brand phishing: Microsoft hits 33% of impersonation; lures target Claude, Antigravity, Apple, Docusign users

Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…