Researchers at Check Point have linked an active phishing campaign to the North Korean hacking group KONNI, also known by several other names. This campaign specifically targets software developers and engineers, using deceptive emails that present fake documentation related to blockchain projects. The attackers are employing an AI-generated PowerShell backdoor to infiltrate systems. This tactic not only showcases the group's evolving methods but also raises concerns about the security of developers working in the rapidly growing blockchain sector. The implications are significant, as successful compromises could lead to data theft and further exploitation of vulnerabilities within the tech community.
Under Armour is currently investigating a data breach that may have exposed approximately 72 million records. The company has stated that, so far, there is no evidence suggesting that the breach affected systems responsible for processing payments or storing customer passwords. This incident raises concerns about the potential exposure of personal data, which could include details such as email addresses and other sensitive information. For users of Under Armour's services, the situation is alarming as it may lead to phishing attempts or identity theft. The company is taking steps to understand the full scope of the breach and to protect its customers moving forward.
Okta has issued a warning about a new wave of attacks targeting its Single Sign-On (SSO) accounts through voice phishing, or vishing. Attackers are using custom phishing kits designed specifically for these social engineering tactics to trick users into revealing their Okta SSO credentials. This breach affects organizations that rely on Okta for secure login processes, potentially exposing sensitive data if attackers gain access. As these attacks are currently active, users are urged to remain vigilant and verify any requests for sensitive information they receive via phone. This situation emphasizes the need for enhanced security measures and user education on recognizing vishing attempts.
LastPass is warning users about a phishing campaign that is attempting to steal their master passwords. Fraudulent emails are being sent to LastPass users, claiming they need to back up their accounts within 24 hours. The company has confirmed that it would never request such an action, indicating that these emails are not legitimate. This phishing attempt poses a risk as it could lead to unauthorized access to users' sensitive information if they fall for the scam. Users are advised to remain vigilant and to disregard any such messages that ask for urgent account actions.
A recent report from Corporation Service Co. (CSC) indicates that a significant number of Global 2000 companies are falling short on domain security. Specifically, 67% of these companies have implemented fewer than half of the recommended security measures for their domains. This lack of adequate protection raises concerns about the vulnerability of these major organizations to cyber threats, such as phishing and domain spoofing. Without proper domain security practices, companies risk their reputation and data integrity, which can lead to financial losses and customer trust issues. The findings serve as a wake-up call for businesses to prioritize their domain security strategies and adopt necessary measures to safeguard their online presence.
A loan phishing scam in Peru is targeting individuals by mimicking legitimate financial institutions. Attackers create fake applications that trick users into providing sensitive information, including credit card details and personal identification numbers (PINs). This scam has raised concerns as it exploits the growing demand for loans, especially among those seeking financial assistance. Victims are at risk of identity theft and financial loss, making it crucial for users to be vigilant about the applications they download and the information they share. Authorities urge the public to verify the authenticity of loan offers and report suspicious activities to prevent further exploitation.
Phishing attacks are becoming more sophisticated and harder to detect, focusing on exploiting human emotions and timing rather than just careless users. Researchers from Flare have revealed that modern phishing tactics have evolved into industrialized operations, making them scalable and more challenging for individuals to recognize. This shift highlights the need for users to be more vigilant and educated about potential scams. Phishing can lead to severe consequences, including financial loss and data breaches, affecting both individuals and organizations. As these tactics grow in complexity, it's crucial for everyone to understand the risks and recognize the signs of phishing attempts.
Ingram Micro, a major technology distributor, experienced a data breach that compromised the personal information of approximately 42,000 individuals. The breach was detected on July 3, 2025, prompting the company to initiate an investigation with cybersecurity experts to assess the extent of the incident. The affected data may include sensitive details, although specifics about what information was accessed have not been disclosed. This incident raises concerns about the security practices in place at Ingram Micro and the potential risks faced by those whose information was exposed. As the investigation continues, affected individuals should remain vigilant for any signs of identity theft or phishing attempts.
Researchers from ReliaQuest have identified a phishing campaign targeting high-profile business executives through LinkedIn messages. The attackers are using an open-source penetration testing tool to craft convincing messages that trick individuals into revealing sensitive information. This campaign is particularly concerning because it targets 'high-value individuals,' making it more likely to succeed against those with access to critical company data. Companies need to educate their employees about recognizing phishing attempts and to implement stronger security measures to protect against these types of attacks. With the rise of social engineering tactics like this, vigilance is essential for safeguarding sensitive business information.
Hackread – Cybersecurity News, Data Breaches, AI, and More
Actively Exploited
Researchers from Resecurity have uncovered a new malware called PDFSIDER that takes advantage of the legitimate PDF24 application to steal sensitive data and provide attackers with remote access to compromised systems. This malware is part of a sophisticated campaign targeting corporate networks, utilizing spear-phishing tactics to lure victims and encrypted communications to evade detection. Companies using PDF24 should be particularly vigilant as this attack leverages a trusted application, making it easier for attackers to bypass security measures. The implications are serious, as this could lead to significant data breaches and unauthorized access to sensitive corporate information.
Security experts have uncovered a targeted campaign aimed at U.S. government and policy organizations, utilizing politically charged themes related to the U.S.-Venezuela relationship. Attackers are distributing a backdoor malware known as LOTUSLITE through spear phishing emails that include a ZIP file titled 'US now deciding what's next for Venezuela.zip.' This tactic exploits current geopolitical tensions to lure victims into opening the malicious attachment. The campaign highlights the ongoing risk of politically motivated cyber attacks that can compromise sensitive information and undermine national security. As such, it's crucial for organizations in the affected sectors to enhance their security measures and educate employees about recognizing phishing attempts.
A hacker has claimed responsibility for a significant data breach involving Max Messenger, reportedly extracting 142 GB of compressed data that includes around 15.4 million user records. The exposed information consists of full names, usernames, and phone numbers, which could put many users at risk of identity theft or spam. This incident raises concerns about the security measures in place to protect user data, especially given the large volume of personal information compromised. Users of Max Messenger should be vigilant about potential phishing attempts and consider changing their passwords to enhance their security. The situation also serves as a reminder for companies to prioritize data protection and implement stronger safeguards against unauthorized access.
Central Maine Healthcare experienced a data breach that affected over 145,000 individuals, including patients and current or former employees. The incident took place between March 19 and June 1 of last year, impacting a healthcare system that serves about 400,000 people in the region. This breach raises concerns about the security of personal and medical information, as sensitive data could be exposed to unauthorized individuals. The healthcare sector is often targeted due to the valuable nature of the data they hold, making it crucial for organizations to enhance their cybersecurity measures. Affected individuals should be vigilant about potential identity theft or phishing attempts following the breach.
Hackers are using fake PayPal notifications to trick users into providing their login credentials. These phishing attacks are designed to exploit remote monitoring and management (RMM) tools, which can give attackers remote access to compromised systems. Users who fall for these scams may unknowingly grant hackers the ability to control their devices, posing a significant security risk. This method of attack affects anyone who uses PayPal, especially those who may not be vigilant about verifying the authenticity of such alerts. It's crucial for users to be cautious about unsolicited emails and messages that request personal information or direct them to unfamiliar websites.
A new phishing campaign is targeting employees by exploiting their anxiety around performance reviews. The attackers are sending emails that impersonate management or HR, claiming to discuss performance evaluations scheduled for October 2025 and falsely hinting at potential layoffs. This tactic aims to create urgency and fear, prompting recipients to click on malicious links or download malware. Companies and employees need to be vigilant, as these scams can lead to data breaches or financial loss. The incident highlights the need for better cybersecurity awareness and training, especially during sensitive times like performance review periods.