July 10, 2024 at 11:03AM Unidentified attackers are propagating a novel credential-harvesting remote access trojan, dubbed Poco RAT, mainly targeting sectors in Latin America. Using email campaigns with Spanish-themed finance lures and Google Drive links, the malware evades email gateways. It is built for anti-analysis, communication with a C2 server, and file delivery, while relying … Read more
October 12, 2023 at 10:21AM A phishing campaign is using LinkedIn smart links to bypass email defenses and target Microsoft users. The campaign involves redirecting users to malicious websites to steal their credentials and personal information. The attackers utilized over 80 unique smart links embedded in more than 800 phishing messages. The campaign targeted individuals … Read more
October 11, 2023 at 09:59AM Hackers are exploiting LinkedIn Smart Links in phishing attacks to steal Microsoft account credentials. The Smart Links, used for marketing and tracking, appear to come from a trustworthy source and bypass email protections. The recent attacks targeted a range of sectors, including finance, manufacturing, energy, construction, and healthcare. The phishing … Read more