Microsoft, Health-ISAC seize domains behind 1B phishing messages
Microsoft's DCU and Health-ISAC seized domains for YAM Store, CoGUI and Iron Man — a Chinese-language phishing marketplace Microsoft ties to over 1 billion messages since January.
Stories tagged: #phishing
Proofpoint: TA419 phishes US AI policy circles via BitB OneDrive
Proofpoint ties China-aligned TA419 to credential phishing against US AI policy experts, using Frameless BitB to spoof Microsoft OneDrive logins and steal MFA-backed sessions.
Star Blizzard hits 100+ orgs with RedFlick, CosmicPulse backdoor
Microsoft ties 13 phishing campaigns since January to Russia's Star Blizzard, using a new RedFlick delivery technique to drop the CosmicPulse backdoor at 100+ US/UK orgs.
FBI: Russian intel now phishes Signal Backup Recovery Keys
FBI PSA I-062626-PSA names UNC5792 and UNC4221, attributes the activity to Russian Intelligence Services, and adds a new Signal Backup Recovery Key phishing tactic to the March warning.