#phishingasaservice — Public Fediverse posts

Безопасники против хакеров: симметрия инструментов и асимметрия скоростей

Специалисты по информационной безопасности и киберпреступники сегодня работают с одним и тем же набором AI-инструментов, но используют их по разные стороны баррикад. Такая симметрия наглядно проиллюстрирована в докладе "When Vibe Scammers Met Vibe Hackers: Pwning PhaaS with Their Own Weapons" исследователя безопасности Цзяо-Лин Ю. Цзяо-Лин взломал фишинговый сайт при помощи Claude Code и Gemini и пробрался в инфраструктуру киберпреступников. Оказалось, что они тоже активно используют нейросети — вот это поворот! Сборка нового сайта занимала у этой группы четыре минуты, а смена домена — всего одну. Стоило заблокировать один сайт, как у этой гидры вырастало сразу несколько новых голов: за одни сутки мошенники подняли больше двадцати новых площадок на других доменах, но на том же движке. Очевидно, что AI масштабирует возможности обеих сторон, но скорость и производительность атакующих растет быстрее. Специалистам по ИБ явно нужны качественно новые подходы к работе, чтобы выиграть в этой гонке. Под катом вас ждут: • история одного пентеста; • расследование фишинговой платформы с доступом за 20 юаней; • рабочий чат, где 30+ мошенников ведут себя как отдел продаж; • админка с мошеннической бухгалтерией и личными данными жертв, доступная по паролю admin; • разговор о том, в каких новых подходах нуждается кибербезопасность.

https://habr.com/ru/companies/bastion/articles/1074934/

#социальная_инженерия #фишинг #пентест #LLM #ииагенты #vibe_coding #vibe_hacking #phishingasaservice #red_team #информационная_безопасность

EvilTokens: Microsoft smaschera il phishing-as-a-service da 12.000 caselle violate con il device code phishing

https://insicurezzadigitale.com/eviltokens-microsoft-smaschera-il-phishing-as-a-service-da-12-000-caselle-violate-con-il-device-code-phishing/

Microsoft Disrupts EvilTokens Phishing Service Targeting 12,000 Accounts

Microsoft's Digital Crimes Unit has struck a major blow against cybercrime, disrupting the EvilTokens phishing service that targeted over 12,000 accounts. Two suspected administrators were arrested in the UK as part of the operation.

https://osintsights.com/microsoft-disrupts-eviltokens-phishing-service-targeting-12000-accounts?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Eviltokens #Microsoft #Uk #LawEnforcement

https://www.europesays.com/ie/679502/ BigBear 2.0 Bypasses Microsoft 365 MFA at 258 Firms #BigBear20 #cloudsek #Éire #Evilginx2 #IE #Ireland #MFABypass #Microsoft365 #MicrosoftEntraId #PhishingAsAService #SessionHijacking #Technology

Microsoft Credentials Targeted in BigBear 2 PhaaS Campaign

Security researchers just uncovered a massive phishing operation targeting Microsoft 365 credentials, with a staggering 5,137 compromised records and 3,331 unique victim IPs exposed. The researchers even gained admin access to the operation's control panel, revealing a vast network of 42 VPS nodes used to carry out the attacks.

https://osintsights.com/microsoft-credentials-targeted-in-bigbear-2-phaas-campaign?utm_source=mastodon&utm_medium=social

#PhishingAsAService #Microsoft365 #CredentialTheft #Bigbear20 #Cloudsek

Phishing Service BigBear Exposes 258 Firms to MFA Bypass

BigBear 2.0, a sneaky phishing-as-a-service operation, has compromised 258 companies by bypassing multi-factor authentication (MFA) for Microsoft 365 users worldwide, swiping 5,137 credential records in the process. This cunning attack used an adversary-in-the-middle approach to intercept passwords, MFA tokens, and session cookies,…

https://osintsights.com/phishing-service-bigbear-exposes-258-firms-to-mfa-bypass?utm_source=mastodon&utm_medium=social

#PhishingAsAService #MfaBypass #Microsoft365 #Evilginx2 #Adversaryinthemiddle

AnonyMousKIT is a PhaaS platform that leverages AI-generated voice agents to steal iPhone passcodes through convincing impersonation calls. SOCRadar exposed the full infrastructure after operators left relative paths unprotected, revealing an automated credential-theft operation active since early 2024.

#AnonyMousKIT #PhishingAsAService #AIThreats #MobileSecurity

https://cyberworldops.eu/en/anonymouskit-the-phishing-as-a-service-using-ai-voices-to-steal-iphone

AnonyMousKIT Phishing Service Exploits Voice AI to Harvest iPhone Passcodes

Meet AnonyMousKIT, a sneaky phishing service that's exploiting voice AI to trick iPhone users into spilling their passcodes, fueling a massive operation with over 500 domains and 168 reseller brands. This clever scam uses stolen device info to craft convincing emails and texts that help crooks unlock stolen Apple devices.

https://osintsights.com/anonymouskit-phishing-service-exploits-voice-ai-to-harvest-iphone-passcodes?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Phaas #Anonymouskit #Apple #Iphone

Mirage2FA Campaign Targets 4,500 Firms, Bypasses Microsoft 365 2FA

Thousands of companies, including 4,532 unique organizations worldwide, have been targeted by the Mirage2FA campaign, a sneaky phishing-as-a-service toolkit that cleverly bypasses Microsoft 365's two-factor authentication. US-based companies are among the hardest hit, making up 63.7% of the victims.

https://osintsights.com/mirage2fa-campaign-targets-4500-firms-bypasses-microsoft-365-2fa?utm_source=mastodon&utm_medium=social

#Mirage2fa #Microsoft365 #Phishingasaservice #MfaBypass #EmergingThreats

Notion Abused to Harvest Authentication Tokens in Targeted Attacks

Researchers uncovered a sneaky phishing campaign where attackers abused Notion to steal authentication tokens, using free accounts to impersonate senior executives and send legit-looking document-sharing notifications. This clever tactic was linked to two phishing-as-a-service platforms and over 600 malicious scripts.

https://osintsights.com/notion-abused-to-harvest-authentication-tokens-in-targeted-attacks?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Eviltokens #Tycoon2fa #CollaborationPlatformAbuse #Notion

A new PhaaS toolkit named iAuthFlow V2 captures passkey registrations during phishing sessions and uses them as persistent backdoors that survive password resets. Passkeys, widely marketed as phishing-resistant, become an attack surface when the initial enrollment is intercepted.

#iAuthFlowV2 #PhishingAsAService #PasskeySecurity #ThreatLandscape

https://cyberworldops.eu/en/passkeys-used-as-backdoor-iauthflow-v2-the-phishing-that-survives

Phishing Service Greatness Exploits RingCentral to Target Microsoft 365 Accounts

A recent security bulletin from RingCentral may have inadvertently given hackers a blueprint for a phishing campaign, as a notorious phishing service known as Greatness has begun targeting Microsoft 365 accounts with sophisticated attacks. Greatness, a phishing-as-a-service platform, has…

https://osintsights.com/phishing-service-greatness-exploits-ringcentral-to-target-microsoft-365-accounts?utm_source=mastodon&utm_medium=social

#PhishingServiceGreatness #Microsoft365 #Ringcentral #Phishingasaservice #Adversaryinthemiddle

Greatness PhaaS Expands to Device Code Phishing

Meet Greatness, a phishing-as-a-service powerhouse that's upgraded its game, now offering a one-stop-shop for cybercriminals to mastermind credential theft, device code phishing, and OAuth consent abuse - all from a single, user-friendly dashboard. This commercial crimeware toolkit has evolved into a full-fledged ecosystem, supporting…

https://osintsights.com/greatness-phaas-expands-to-device-code-phishing?utm_source=mastodon&utm_medium=social

#PhishingAsAService #Adversaryinthemiddle #DeviceCodePhishing #OauthConsentAbuse #Aitm

LogoKit Phishing Kit Dynamically Recreates Victim Sites

This phishing-as-a-service platform takes impersonation to the next level by dynamically recreating victim sites, using live screenshots of the target organization's own website as the page background to create a convincing and highly personalized attack. It's a clever twist on traditional phishing that's making it harder…

https://osintsights.com/logokit-phishing-kit-dynamically-recreates-victim-sites?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Logokit #EnvironmentImpersonation #EmergingThreats #ThreatIntelligence

Authorities Disrupt Kratos Phishing Platform in Global Operation

In a major global crackdown, authorities have shut down Kratos, a notorious phishing-as-a-service platform that helped cybercriminals create fake Microsoft login pages to steal sensitive info. The takedown has disrupted a key tool used by over 1,800 customers to commit crimes like business email compromise and data theft.

https://osintsights.com/authorities-disrupt-kratos-phishing-platform-in-global-operation?utm_source=mastodon&utm_medium=social

#PhishingAsAService #Kratos #Microsoft #BusinessEmailCompromise #AccountTakeover

Forg365 Phishing Service Targets Microsoft 365 with Advanced Device Code Theft

Meet Forg365, a sophisticated phishing service that's targeting Microsoft 365 users with advanced device code theft capabilities, offering a disturbingly user-friendly operator panel and a subscription-based model starting at just $400 a month. This illicit toolkit is being sold on Telegram, putting sensitive data at risk…

https://osintsights.com/forg365-phishing-service-targets-microsoft-365-with-advanced-device-code-theft?utm_source=mastodon&utm_medium=social

#Phishingasaservice #MfaBypass #Microsoft365 #EmergingThreats #Oauth

Forg365 Phishing Platform Exploits AI to Target Microsoft 365 Accounts

Meet Forg365, a sneaky new phishing platform that uses AI to make it easy for hackers to target Microsoft 365 accounts and steal sensitive info. This phishing-as-a-service operation offers a range of tools, including AI-generated lures, to help cybercriminals launch convincing attacks.

https://osintsights.com/forg365-phishing-platform-exploits-ai-to-target-microsoft-365-accounts?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Microsoft365 #AiassistedPhishing #Adversaryinthemiddle #Forg365

Google Sues Chinese Scammers Over Gemini AI Misuse

Google is taking a stand against scammers, suing a group called Outsider Enterprise that uses its Gemini AI feature to create fake websites and scam people through text messages. The group, which operates on Telegram, offers phishing-as-a-service, making it easy for non-tech-savvy scammers to target victims.

https://osintsights.com/google-sues-chinese-scammers-over-gemini-ai-misuse?utm_source=mastodon&utm_medium=social

#Phishingasaservice #GeminiAi #OutsiderEnterprise #Telegram #AiMisuse

ARToken Phishing Platform Exposes EvilTokens' Microsoft 365 Toolkit

Cisco Talos researchers have uncovered a sophisticated phishing platform, ARToken, that offers a Microsoft 365 toolkit and goes far beyond traditional credential-harvesting pages, exposing over 80 API endpoints. This phishing-as-a-service operation is a game-changer in the world of cyber threats.

https://osintsights.com/artoken-phishing-platform-exposes-eviltokens-microsoft-365-toolkit?utm_source=mastodon&utm_medium=social

#PhishingAsAService #Microsoft365 #Artoken #Eviltokens #CiscoTalos

Bluekit Phishing Kit Enhances Login Theft with Browser-in-the-Middle Tactics

Bluekit's phishing kit just got a sinister upgrade, now using browser-in-the-middle tactics to steal logins in real-time. This move has led to a massive expansion of its infrastructure, with nearly 70 new hostnames appearing in just one week.

https://osintsights.com/bluekit-phishing-kit-enhances-login-theft-with-browser-in-the-middle-tactics?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Browserinthemiddle #Bluekit #LoginTheft #EmergingThreats

Google Disrupts Chinese Smishing Network Tied to AI-Generated Phishing Attacks

Google just took down a massive Chinese smishing network that used AI-generated phishing pages to scam millions of mobile users, and is now suing to dismantle the operation for good. The tech giant is teaming up with major carriers like AT&T, T-Mobile, and Verizon to block the fraudulent texts and shut down the…

https://osintsights.com/google-disrupts-chinese-smishing-network-tied-to-ai-generated-phishing-attacks?utm_source=mastodon&utm_medium=social

#PhishingAsAService #China #Smishing #AigeneratedPhishing #Google

INTERPOL Disrupts Sniper Dz Phishing Platform in Global Operation

In a major global crackdown, INTERPOL dismantled the notorious Sniper Dz phishing platform, a hub for cybercriminals to buy and use ready-made phishing kits, in a coordinated effort that resulted in 201 arrests across 13 countries. The operation, dubbed Operation Ramz, dealt a significant blow to the phishing-as-a-service industry.

https://osintsights.com/interpol-disrupts-sniper-dz-phishing-platform-in-global-operation?utm_source=mastodon&utm_medium=social

#PhishingAsAService #SniperDz #Interpol #OperationRamz #EmergingThreats

Interpol Disrupts SniperDz Phishing-as-a-Service Platform

In a major blow to cybercrime, Interpol has dismantled the notorious SniperDz Phishing-as-a-Service platform, a significant player in the global phishing landscape. This success is a testament to the power of cross-border collaboration, with 13 countries joining forces to bring down the operation.

https://osintsights.com/interpol-disrupts-sniperdz-phishing-as-a-service-platform?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Interpol #OperationRamz #EmergingThreats #Cybercrime

FBI Warns of Kali365 Phishing Kit's OAuth Token Heist

The FBI has sounded the alarm on Kali365, a phishing-as-a-service platform that's making it easy for even novice hackers to steal Microsoft 365 login credentials and bypass security measures like multifactor authentication. This subscription-based service, mainly spread through Telegram, provides attackers with AI-generated phishing lures, campaign…

https://osintsights.com/fbi-warns-of-kali365-phishing-kits-oauth-token-heist?utm_source=mastodon&utm_medium=social

#Phishingasaservice #MfaBypass #Microsoft365 #Oauth #Kali365

Chinese PhaaS Ecosystem Evolves, Threatens Global Financial Security

The game has changed in the world of phishing: attackers are now using Phishing as a Service (PhaaS) to intercept one-time passcodes and tokenize payment cards, giving them direct control over victims' financial accounts. This sinister shift threatens global financial security, allowing attackers to tap into accounts…

https://osintsights.com/chinese-phaas-ecosystem-evolves-threatens-global-financial-security?utm_source=mastodon&utm_medium=social

#PhishingAsAService #Phaas #FinancialSecurity #GoogleThreatIntelligenceGroup #Gtig

FBI Warns of Kali365 Phishing Kit Targeting Microsoft 365 Users

The FBI is sounding the alarm on Kali365, a phishing kit that makes it easy for attackers to target Microsoft 365 users with AI-generated scams, automated templates, and real-time tracking. This powerful tool is lowering the bar for cybercriminals, allowing less tech-savvy attackers to launch sophisticated phishing campaigns.

https://osintsights.com/fbi-warns-of-kali365-phishing-kit-targeting-microsoft-365-users?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Microsoft365 #MfaBypass #Oauth #EmergingThreats

OAuth Grants Expose Hidden Risk Below MFA Perimeter

In just five weeks, a phishing-as-a-service platform called EvilTokens compromised over 340 Microsoft 365 organizations across five countries by exploiting a clever trick: instead of stealing passwords, it convinced users to hand over OAuth refresh tokens, granting attackers long-term access to sensitive data like mailboxes, drives, and…

https://osintsights.com/oauth-grants-expose-hidden-risk-below-mfa-perimeter?utm_source=mastodon&utm_medium=social

#OauthSecurityRisk #Phishingasaservice #MfaBypass #Eviltokens #Microsoft365

Tycoon2FA-Phishing nutzt 2FA gegen MS365

Seit Ende April 2026 beobachten Sicherheitsexperten eine neue Welle von Phishing-Angriffen, die selbst die Zwei-Faktor-Authentifizierung (MFA) für eigene, kriminelle Zwecke nutzen.

Mehr: https://maniabel.work/archiv/1591

#2FA #Microsoft365 #PhaaS #Phishing #PhishingAsAService #Trustifi

https://www.europesays.com/be-nl/61835/ Barracuda: AI en phishing-as-a-service drijven e-mailaanvallen op #AI #Barracuda #BE #België #Belgium #cybersecurity #EMailbeveiliging #EmailThreats #Phishing #PhishingAsAService #QRCodes #Science #ScienceAndTechnology #ScienceAndTechnology #Technologie #Technology #Wetenschap #WetenschapEnTechnologie #WetenschapTechnologie

https://www.europesays.com/be-nl/49285/ Top vier merken goed voor helft phishingpogingen wereldwijd #BE #België #Belgium #BrandPhishing #CheckPointResearch #cybersecurity #Google #merkphishing #Microsoft #Phishing #PhishingAsAService #Science #ScienceAndTechnology #ScienceAndTechnology #Technologie #Technology #Wetenschap #WetenschapEnTechnologie #WetenschapTechnologie

Automatisierter KI Telefonbetrug mit ATHR
Der neue Cybercrime-Dienst ATHR macht es Kriminellen einfacher denn je, komplexe Telefonangriffe durchzuführen.

https://maniabel.work/archiv/1446
#Phishing #ATHR #infosec #PhishingAsAService #Telefonbetrug #TelephoneOrientedAttackDelivery #VoicePhishing
#up2date

Automatisierter KI Telefonbetrug mit ATHR
Der neue Cybercrime-Dienst ATHR macht es Kriminellen einfacher denn je, komplexe Telefonangriffe durchzuführen.

https://maniabel.work/archiv/1446
#Phishing #ATHR #infosec #PhishingAsAService #Telefonbetrug #TelephoneOrientedAttackDelivery #VoicePhishing
#up2date

📬 W3LL Phishing-Netzwerk zerschlagen: FBI stoppt Millionenbetrug mit 500-Dollar-Toolkit
#Cyberangriffe #DarkCommerce #AccountÜbernahme #Cybercrime #Datenklau #FBI #MultiFaktorAuthentifizierung #OnlineBetrug #Phishing #PhishingasaService #PhishingKit #W3LLPhishingNetzwerk https://sc.tarnkappe.info/a8f558

VENOM Phishing Attacks Target C-Suite Microsoft Logins

A new phishing-as-a-service platform called VENOM is making it alarmingly easy for hackers to target senior executives, specifically seeking their Microsoft logins. This compact toolkit is putting the keys to the corner office within reach of any motivated adversary, leaving security teams scrambling to respond.

https://osintsights.com/venom-phishing-attacks-target-c-suite-microsoft-logins?utm_source=mastodon&utm_medium=social

#Phishingasaservice #Venom #Microsoft #Csuite #EmergingThreats

Анатомия PhaaS-кита: как коммерческая фишинговая платформа фильтрует песочницы через browser fingerprinting

Разбираем фишинговое письмо, пришедшее на адрес НКО: от SendGrid-доставки с SPF/DKIM pass до реверса JavaScript-фреймворка collector.js, который собирает GPU fingerprint, ломает WebRTC для раскрытия IP за VPN и детектирует DevTools — до того как жертва увидит фишинговую форму.

https://habr.com/ru/articles/1014420/

#phishing #phishingasaservice #browser_fingerprinting #webrtc #sendgrid #incident_response #threat_intelligence #javascript

📬 LeakBase und Tycoon 2FA abgeschaltet: Doppelschlag gegen Cybercrime-Lieferkette
#DarkCommerce #Cybercrime #CybercrimePlattformen #Datenleaks #europol #LeakBase #MehrfaktorAuthentifizierung #Phishing #PhishingasaService #Tycoon2FA https://sc.tarnkappe.info/e2c626

Microsoft and Cloudflare just took down a phishing empire that fooled thousands with virtually perfect fake login pages. How did cybercriminals build a global marketplace on trust—and what does this mean for our online security?

https://thedefendopsdiaries.com/raccoono365-inside-the-global-phishing-as-a-service-empire-disrupted-by-microsoft-and-cloudflare/

#phishing
#cybercrime
#microsoft365
#cloudflare
#infosec
#phishingasaservice
#cybersecurity
#credentialtheft
#threatintel
#cyberattack

Microsoft, Cloudflare Disrupt RaccoonO365 Phishing-as-a-Service Operation Targeting MS 365 https://thecyberexpress.com/raccoono365-phishing-as-a-service-operation/ #phishingasaservice #RaccoonO365 #Cloudflare #CyberNews #Microsoft

Salty2FA phishing kit = enterprise-level threat.
🔄 Rotating subdomains per victim
🛡️ Cloudflare Turnstile anti-analysis
🔑 MFA simulation (SMS, push, tokens, codes)
🎨 Dynamic branding that mirrors corporate portals
Phishing is blurring the line between legit & malicious.

Follow @technadu for continuous threat intel.

#Salty2FA #PhishingAsAService #Evasion #CloudflareAbuse #CyberThreat

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-onderwijs-ontwikkeling/cybercrime/2603946_156-meer-identiteitsdiefstal-hoe-phishing-as-a-service-en-infostealers-mfa-omzeilen-om-je-bankrekening-en-email-te-hacken

Podcast Spotify: https://open.spotify.com/episode/7tY2cjpUfysMeBiKTNkG4l?si=23f0908dcb314e27

Podcast Youtube: https://youtu.be/o0GcyXfFFGA

#identiteitsdiefstal #phishingasaservice #infostealers #cybercrime #Cybersecurity

De digitale dreigingen nemen in snelheid en complexiteit toe, en een van de meest zorgwekkende aanvallen is Adversary-in-the-Middle (AitM) phishing.

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-onderwijs-ontwikkeling/cybercrime/phishing/2557618_wie-zit-er-tussen-jou-en-je-wachtwoord-de-gevaren-van-aitm-phishing-onthuld

Podcast Spotify: https://open.spotify.com/episode/4wUUyfd3JSFFgYbff3KOny?si=054a2c87cbe54176

Podcast Youtube: https://youtu.be/ngli1dXuicc

#AitMphishing #Phishing #Cybercrime #Cybersecurity #PhishingAsAService #PhaaS #ReverseProxy #MFA #MultiFactorAuthentication #BEC #BusinessEmailCompromise #Ransomware #DataProtection

AI-powered phishing kits are now so simple to deploy that even cyber novices can launch global, multi-language scams. How safe is our digital world when cybercrime gets this advanced? Read on to see the dark evolution in cybercrime.

https://thedefendopsdiaries.com/the-evolution-of-phishing-as-a-service-a-new-era-in-cybercrime/

#phishingasaservice
#cybercrime
#darcula
#generativeai
#cybersecurity

FBI shared a list of phishing domains associated with the LabHost PhaaS platform – Source: securityaffairs.com https://ciso2ciso.com/fbi-shared-a-list-of-phishing-domains-associated-with-the-labhost-phaas-platform-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #PhishingasaService #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #CyberCrime #Cybercrime #PhaaS

Morphing Meerkat phishing kits exploit DNS MX records – Source: securityaffairs.com https://ciso2ciso.com/morphing-meerkat-phishing-kits-exploit-dns-mx-records-source-securityaffairs-com/ #informationsecuritynews #ITInformationSecurity #PhishingasaService #SecurityAffairscom #PierluigiPaganini #MorphingMeerkat #SecurityAffairs #BreakingNews #Phishingkits #SecurityNews #hackingnews #0CISO2CISO #CyberCrime #Cybercrime #Phishing #hacking #Malware

Lucid: A New Era in Phishing Threats

https://thedefendopsdiaries.com/lucid-a-new-era-in-phishing-threats/

#phishing
#cybersecurity
#lucidplatform
#phishingasaservice
#mobilethreats

Morphing Meerkat: A Sophisticated Phishing-as-a-Service Threat

https://thedefendopsdiaries.com/morphing-meerkat-a-sophisticated-phishing-as-a-service-threat/

#phishingasaservice
#cybersecurity
#dnssecurity
#morphingmeerkat
#advancedthreats

‘Sneaky Log’ Microsoft Spoofing Scheme Sidesteps Two-Factor Security – Source: www.techrepublic.com https://ciso2ciso.com/sneaky-log-microsoft-spoofing-scheme-sidesteps-two-factor-security-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #Businessemailcompromise #twofactorauthentication #SecurityonTechRepublic #SecurityTechRepublic #PhishingasaService #CyberSecurityNews #socialengineering #microsoftoutlook #MicrosoftOffice #Cybersecurity #Microsoft365 #Cloudflare #Microsoft #sneaky2fa

Researchers Uncover Phishing-As-A-Service Domains Associated With Tycoon 2FA https://gbhackers.com/phishing-service-tycoon-2fa/ #PhishingasaService(PhaaS) #CybersecurityThreats #CyberSecurityNews #Tycoon2FA #Phishing #Malware

This is an ad served by Google Ads. It appears superimposed on a (legitimate) web page, with the rest of the page blurred out. I didn't check to see where clicking the Open button would take me, but I doubt it's anywhere good.

Google does allow users to give feedback on this ad, but the only option is "Seen too many times”. There is no option to flag it as the blatant cross-site scripting/probable #phishing attack that it is.

#security #Google #PhishingAsAService #BadActors

Phishing-as-a-Service Rockstar 2FA continues to be prevalent – Source: securityaffairs.com https://ciso2ciso.com/phishing-as-a-service-rockstar-2fa-continues-to-be-prevalent-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #PhishingasaService #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #Rockstar2FA #CyberCrime #Cybercrime #Phishing #hacking #PhaaS

Phishing-as-a-Service “Rockstar 2FA” Targets Microsoft 365 Users with AiTM Attacks – Source:thehackernews.com https://ciso2ciso.com/phishing-as-a-service-rockstar-2fa-targets-microsoft-365-users-with-aitm-attacks-sourcethehackernews-com/ #rssfeedpostgeneratorecho #PhishingasaService #CyberSecurityNews #TheHackerNews

Microsoft seized 240 sites used by the ONNX phishing service – Source: securityaffairs.com https://ciso2ciso.com/microsoft-seized-240-sites-used-by-the-onnx-phishing-service-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #PhishingasaService #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #CyberCrime #Cybercrime #hacking

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft https://gbhackers.com/microsoft-seizes-240-phaas-sites/ #PhishingasaService(PhaaS) #CyberSecurityNews #cybersecurity #MicrosoftDCU #CyberCrime #Phishing

📬 iServer: Phishing-Dienst-Abschaltung folgten 17 Festnahmen
#DarkCommerce #DmitriVolkow #europol #GroupIB #iServer #OperationKaerb #PhishingasaService https://sc.tarnkappe.info/55a9fc

Global Phishing Network Busted in Major Cross-Continent Operation https://thecyberexpress.com/global-phishing-network-busted/ #TheCyberExpressNews #phishingasaservice #CyberEssentials #TheCyberExpress #OperationKaerb #FirewallDaily #CyberNews #Phishing #Europol #iServe

New PhaaS Platform Lets Attackers Bypass Two-Factor Authentication https://gbhackers.com/phaas-platform-bypass-2fa/ #TwoFactorAuthenticationBypass #PhishingasaService(PhaaS) #TelegramBotOperations #CybersecurityThreats #CyberSecurityNews #EmailSecurity #CyberCrime #Phishing

Hackers Attacking Banking Customers Using Phishing-As-A-Service V3B Toolkit https://gbhackers.com/hackers-banking-customers-phishing-v3b-toolkit/ #PhishingasaService(PhaaS) #CyberSecurityNews #FraudPrevention #EmailSecurity #cybersecurity #CyberCrime #Phishing

📬 V3B-Phishing-Kit: Neues Cybercrime-Tool steht auf Telegram zum Verkauf
#Cyberangriffe #Malware #Cybercrime #PhishingasaService #Resecurity #Telegram #V3BPhishingKit #Vssrtje https://sc.tarnkappe.info/0b4c9b