Russian-linked hackers use phishing plus legitimate OAuth and WhatsApp device linking to hijack high-value government, defense, and academic accounts.
Tag: social engineering
Copilot’s CoSnitch Bug: One Click and Your Email Walks Out the Door
Microsoft patched CoSnitch, a Copilot bug that stole Gmail, Drive, and Calendar data with one click. Here’s what regular people need to know.
Microsoft Ties 30-Plus Rotating Domains to MacSync, the Mac Password Stealer
Microsoft linked 30-plus rotating domains to MacSync Stealer, which grabs Mac Keychain, browser logins, SSH keys, and AWS credentials from infected Macs.
Microsoft Ties 30-Plus Rotating Domains to MacSync Stealer Targeting Mac Users
Microsoft linked more than 30 rotating web domains to MacSync Stealer, a macOS information thief. Regular Mac users need to know what that actually means.
QR Codes Can Steal Your Info Fast If You Do Not Check First
QR code scams hide behind everyday posters and menus. Learn the simple checks that keep your phone and data safe before you scan anything.
Russian Hackers Slip Malware Into Fake Zoom And Webex Downloads
Hackers are pushing trojanized versions of Zoom and Webex to install Starland malware that steals data from regular users.
WhatsApp GhostPairing Attack Opens Door to Account Takeovers
Hackers found a way to link devices to your WhatsApp without you noticing. It lets them grab your chats and contacts. Time to check your settings.
One Wrong OAuth Click Hands Hackers the Keys to Your Accounts
A single malicious OAuth approval can give attackers full access to your email and files without needing your password. Learn what happens and how to stay safe.
AI Chatbots Are Inventing Fake Domains And Crooks Are Squatting On Them
Attackers are registering domains that AI models hallucinate into existence, creating a new way to trap users who trust their chatbots for info.