Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
October 29, 2026
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a
Phishing
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a full OS reset.
Fake Claude Download Pages on claude.ai Spread Mac Stealer
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS Stealer and a Windows RAT.
Fake IT Support Teams Chats Tied to 400+ Intrusions, Arctic Wolf Says
Arctic Wolf details a pattern in 400+ incidents where attackers pose as IT support in Microsoft Teams external chats and run malware within 15 minutes.
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked to over a billion scam ...
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
ClickFix Variant Smuggles Payloads Through Browser Cache
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the Windows Run dialog's character limit.
Nikkei Discloses M365 Breach, 9,000 Spoofed Emails Sent
Nikkei disclosed a Microsoft 365 account breach that sent 9,000 spoofed emails to contacts, plus a separate cloud intrusion exposing data on 1,646 people.
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
A phishing campaign dubbed CSuite is hijacking executives' Microsoft 365 sessions and installing ScreenConnect and Action1 for persistent remote access.
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100 Ukraine-linked organizations.
Fake Claude Download Pages on claude.ai Spread Mac Stealer
October 28, 2026
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS
Fake IT Support Teams Chats Tied to 400+ Intrusions, Arctic Wolf Says
October 28, 2026
Arctic Wolf details a pattern in 400+ incidents where attackers pose as IT support in Microsoft Teams external chats and
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
October 15, 2026
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
October 12, 2026
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers
Phishers Abuse Power BI Dashboards to Install ScreenConnect
October 12, 2026
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
ClickFix Variant Smuggles Payloads Through Browser Cache
October 6, 2026
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the
Nikkei Discloses M365 Breach, 9,000 Spoofed Emails Sent
October 5, 2026
Nikkei disclosed a Microsoft 365 account breach that sent 9,000 spoofed emails to contacts, plus a separate cloud intrusion exposing
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
October 1, 2026
A phishing campaign dubbed CSuite is hijacking executives’ Microsoft 365 sessions and installing ScreenConnect and Action1 for persistent remote access.
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
September 30, 2026
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.