Follow us on Bluesky, Twitter (X) and Facebook at @Hackread

Malvertising campaign targets Onfido users via deceptive Google ads, using Evilginx to steal credentials.

Day 3 of my #60DaysOfLearning2025

Ah Shit! Here we go again!

In the red team world, Evilginx has become a well-known framework for adversary-in-the-middle simulations. It’s powerful, but there’s a…

Evilginx, a security research tool designed to bypass MFA, was adopted by groups like Scattered Spider and used in the $100M MGM Resorts breach.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A new investigation by The Socket Threat Research Team has uncovered a sophisticated spear-phishing operation that has abused the npm registry for at least five months to target critical infrastru…

At a glance Actor / group codemado, mail-argenta, saroula01 (online aliases) Activity AiTM phishing and OAuth Device Code Flow abuse Targets / victims Corporate Microsoft 365 accounts, plus crypto…

A Chinese Spy Group Targets Trust, Not Bugs A Chinese cyber-espionage group has chosen a new way into the circle of American AI experts. It does not use a vulnerability. It uses trust. The group, …