World Cup 2026 Phishing Campaign Delivers Stealthy Voidrift Malware via Personalized Lures

A highly personalized phishing campaign is currently exploiting excitement surrounding the FIFA World Cup 2026 to distribute a stealthy malware family known as Voidrift. Threat actors are utilizing extensive reconnaissance to customize emails with the recipient’s name, employer name, and even corporate logos embedded into images of free t-shirts, creating highly convincing lures. The campaign […]
Phishing Attacks Surge: Employee Data Target of Choice

Phishing attacks targeting employee credentials and sensitive organizational data have reached an all-time high, driven by the proliferation of AI-assisted phishing tools and sophisticated social engineering tactics. According to the latest Cybersecurity Threat Report, cybercriminals are shifting away from mass campaigns to target high-value roles in Finance, HR, and IT who have access to payroll […]
New Phishing Scam ‘Kali365’ Bypasses MFA to Target Outlook and OneDrive Users

A newly identified phishing-as-a-service platform known as Kali365 is targeting Microsoft 365 users, putting Outlook, OneDrive, and Teams accounts at serious risk. By exploiting the legitimate Device Code authentication flow, attackers trick users into entering temporary codes on genuine Microsoft verification pages. This session-hijacking method allows cybercriminals to bypass Multi-Factor Authentication (MFA) and secure persistent […]
IRS Releases “Dirty Dozen” Tax Scams for 2026: Protect Your Inbox

The IRS has released its annual “Dirty Dozen” tax scams for 2026, warning of a surge in sophisticated phishing, smishing, and AI-enabled phone spoofing campaigns designed to steal personal identity data and tax refunds. Fraudsters are increasingly using realistic email and text messages that impersonate the IRS, complete with QR codes leading to fake portals, […]
How Scammers Use Simple Google Searches to Target the Elderly

A simple Google search can reveal personal details that scammers use to launch targeted attacks, especially against the elderly. By scraping data brokers and public social media profiles indexed by Google, criminals can quickly build a detailed profile of a family’s network. They then use this information to pose as a relative in distress—often calling […]
Scammers Using Invisible Text to Evade AI Email Filters

Scammers are continually evolving their tactics, and their latest method involves hiding invisible text within phishing emails to manipulate and bypass AI-powered security filters. This stealthy approach alters how the email’s content is analyzed by security systems without changing its visual appearance to the victim, ensuring their scams land directly in your inbox. Don’t leave […]
Phishing Scams Use FOMO & Fake Party Invites

Cybercriminals are using your fear of missing out (FOMO) to spread malware by disguising phishing links as vague party invitations from popular platforms like Evite and Paperless Post. This scheme is especially devious because the fake invites often originate from the hacked email accounts of friends or former colleagues, making them appear completely legitimate. Clicking […]
FBI Warns of Medical Phishing Scams

The Federal Bureau of Investigation is raising alarms about a surge in sophisticated phishing emails where scammers impersonate health insurance fraud investigators to steal sensitive medical and financial data. These fraudulent emails are designed to trick you into disclosing protected health information and personal records by creating a false sense of urgency. Don’t let medical […]
New Google Account Phishing Scam: Highly Realistic and Polished

A sophisticated new phishing scheme is exploiting the trust users place in Google’s legitimate infrastructure, using the official no-reply@accounts.google.com address and Google Sites to deliver convincing fake subpoena alerts. By routing victims through real Google login pages before landing them on fraudulent support sites, this attack easily bypasses traditional spam filters and lowers the guard […]
New Apple iCloud Phishing Campaign Targets Millions

A sophisticated new phishing scam is currently circulating, targeting Apple users with highly deceptive iCloud account alerts that claim suspicious activity or payment failures. These emails are designed to look remarkably authentic, using urgent language and professional branding to pressure users into clicking malicious links and providing their Apple ID credentials under the threat of […]