A new "Pick Your Poison" phishing campaign tricks users into choosing between having their credentials stolen or infecting their systems with malware. Cofense analysis reveals how this double-edged attack uses files.fm to deliver malicious payloads.

Cofense Intelligence reports a new phishing tactic using blob URIs to bypass Secure Email Gateways. Attackers use these local URIs to hide phishing pages.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Spain's .es domain surged 19x in cybercrime use, becoming the 3rd most popular TLD for phishing & RATs. Attackers use random subdomains hosted on Cloudflare to bypass detection.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

The Lone None group uses fake copyright notices to deliver a new stealer malware that focuses on crypto theft via clipboard replacement and utilizes Telegram for C2.

A new, aggressive tech support scam has been discovered by experts at the Cofense Phishing Defense Centre, who say it’s actively exploiting the public’s trust in huge brands like Microsoft. The attackers are now using Microsoft’s logo and branding to trick…

Cybercriminals are using fake DocuSign emails and the JWrapper framework to stealthily deploy SimpleHelp remote access tools. Learn how to spot the threat.

Cofense uncovers a stealthy campaign abusing legacy WebDAV in Windows File Explorer to bypass browsers and EDR, delivering XWorm and Async RAT via UNC paths.

A new Cofense report reveals how hackers abuse legitimate Telegram Bot APIs to create stealthy Command and Control (C2) centers for data exfiltration.

New Phishing scam uses fake missile alerts and the ongoing conflict involving Iran to target users with QR codes and fake government emails to steal Microsoft passwords.

A fake Amazon alert uses ClickFix malware to trick users into deploying the HarborWatch Agent RAT. See how the self-infection scam works.