⤷ Title: Microsoft 365 “Direct Send” Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:11:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Direct Send #Email Security #Exchange Online #Microsoft 365 #phishing #Quishing #Smart Host #spoofing #threat actor #Varonis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:11:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Direct Send #Email Security #Exchange Online #Microsoft 365 #phishing #Quishing #Smart Host #spoofing #threat actor #Varonis
Daily CyberSecurity
Microsoft 365 "Direct Send" Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
Varonis uncovers a widespread phishing campaign abusing Microsoft 365's Direct Send, spoofing internal users to bypass email security and harvest credentials.
⤷ Title: Microsoft 365 “Direct Send” Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 07:18:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Direct Send #email security #Exchange Online #Microsoft 365 #phishing #Quishing #Smart Host #Spoofing #Threat Actor #Varonis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 07:18:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Direct Send #email security #Exchange Online #Microsoft 365 #phishing #Quishing #Smart Host #Spoofing #Threat Actor #Varonis
Penetration Testing Tools
Microsoft 365 "Direct Send" Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
Varonis uncovers a widespread phishing campaign abusing Microsoft 365's Direct Send, spoofing internal users to bypass email security and harvest credentials.
⤷ Title: BiDi Swap: A Decade-Old Unicode Flaw Still Enables URL Spoofing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 00:32:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BiDi Swap #browser security #cybersecurity #phishing attacks #Unicode #URL spoofing #Varonis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 00:32:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BiDi Swap #browser security #cybersecurity #phishing attacks #Unicode #URL spoofing #Varonis
Daily CyberSecurity
BiDi Swap: A Decade-Old Unicode Flaw Still Enables URL Spoofing
A decade-old browser flaw, "BiDi Swap," allows attackers to craft deceptive URLs for phishing. The bug, found by Varonis, exploits mixed-text direction.
⤷ Title: MatrixPDF: New Toolkit Turns Ordinary PDFs Into Interactive Phishing Lures That Bypass Gmail
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:20:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #email security #JavaScript #MaaS #malware #MatrixPDF #PDF Phishing #Varonis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:20:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #email security #JavaScript #MaaS #malware #MatrixPDF #PDF Phishing #Varonis
Penetration Testing Tools
MatrixPDF: New Toolkit Turns Ordinary PDFs Into Interactive Phishing Lures That Bypass Gmail
Varonis discovered MatrixPDF, a new toolkit that weaponizes PDFs with JavaScript and interactive lures to bypass email filters and redirect victims to phishing sites.
⤷ Title: Spiderman Phishing Kit Targets European Banks with Real-Time Credential Theft
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 22:14:10 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Dark Web #Crypto #Cybersecurity #dark web #Phishing #Phishing Kit #Spiderman #Varonis
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 22:14:10 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Dark Web #Crypto #Cybersecurity #dark web #Phishing #Phishing Kit #Spiderman #Varonis
Hackread
Spiderman Phishing Kit Targets European Banks with Real-Time Credential Theft
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: The Silent Listener: How “Reprompt” Hijacks Microsoft Copilot with One Click
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:35:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Data Exfiltration #Edge Browser #Infosec News #Microsoft Copilot #Prompt Injection #Reprompt #Varonis #Vulnerability 2026 #Windows Update
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:35:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Data Exfiltration #Edge Browser #Infosec News #Microsoft Copilot #Prompt Injection #Reprompt #Varonis #Vulnerability 2026 #Windows Update
Penetration Testing Tools
The Silent Listener: How "Reprompt" Hijacks Microsoft Copilot with One Click
Security analysts at Varonis have unveiled a sophisticated offensive targeting Microsoft’s AI assistant, designated as Reprompt. This maneuver
⤷ Title: One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:02:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Assistant #AI security #Copilot Personal #Cyber Security #data exfiltration #Microsoft Copilot #Reprompt #Varonis Threat Labs #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:02:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Assistant #AI security #Copilot Personal #Cyber Security #data exfiltration #Microsoft Copilot #Reprompt #Varonis Threat Labs #Vulnerability
Daily CyberSecurity
One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed
A new research report from Varonis Threat Labs has unveiled a vulnerability in Microsoft Copilot Personal that could have allowed attackers to steal sensitive data with a single mouse click. Dubbe…
⤷ Title: “Exfil Out&Look” Flaw Lets Spies Steal Emails via OWA Undetected
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:21:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Audit Logs #Cloud Security #data exfiltration #Email Security #Exfil Out&Look #Insider Threat #Microsoft 365 #Outlook Web Access #OWA #Varonis Threat Labs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:21:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Audit Logs #Cloud Security #data exfiltration #Email Security #Exfil Out&Look #Insider Threat #Microsoft 365 #Outlook Web Access #OWA #Varonis Threat Labs
Daily CyberSecurity
"Exfil Out&Look" Flaw Lets Spies Steal Emails via OWA Undetected
New "Exfil Out&Look" attack uses OWA add-ins to steal emails without leaving logs. Microsoft has no immediate fix for this blind spot.
⤷ Title: Unmasking 1Campaign: The Professionalized ‘Cloaking’ Service Powering Global Malvertising Scams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 03:17:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #1Campaign #Ad Fraud #Cloaking #crypto drainer #Cybercrime #DuppyMeister #Google Ads #infosec #Malvertising #phishing #Varonis Threat Labs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 03:17:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #1Campaign #Ad Fraud #Cloaking #crypto drainer #Cybercrime #DuppyMeister #Google Ads #infosec #Malvertising #phishing #Varonis Threat Labs
Daily CyberSecurity
Unmasking 1Campaign: The Professionalized 'Cloaking' Service Powering Global Malvertising Scams
Varonis uncovers 1Campaign, a sophisticated tool by 'DuppyMeister' that helps hackers bypass Google Ads security to deliver phishing and crypto drainers.
⤷ Title: Hackers Use 1Campaign to Hide Malicious Ads From Google Reviewers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 11:16:11 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #1Campaign #Cloaking #Google #Google Ads #Malvertising #Phishing Kit #Varonis
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 11:16:11 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #1Campaign #Cloaking #Google #Google Ads #Malvertising #Phishing Kit #Varonis
Hackread
Hackers Use 1Campaign to Hide Malicious Ads From Google Reviewers
Follow us on all social media @Hackread
⤷ Title: Storm Infostealer Sold as Service, Targets Browsers, Wallets and Accounts
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 13:08:54 +0000
════════════════════════
⌗ Tags: #Security #Malware #Chrome #Cyber Attack #Cybersecurity #Infostealer #Storm #Varonis
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 13:08:54 +0000
════════════════════════
⌗ Tags: #Security #Malware #Chrome #Cyber Attack #Cybersecurity #Infostealer #Storm #Varonis
Hackread
Storm Infostealer Sold as Service, Targets Browsers, Wallets and Accounts
Hackers are selling Storm Infostealer, a tool that bypasses Chrome encryption to steal cookies, credentials, crypto wallets and accounts across browsers.
⤷ Title: Storm: 2026’s Newest Infostealer Bypasses Chrome to Hijack Your MFA Sessions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:01:38 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #browser security #Chrome 127 #Credential Theft #cybersecurity #infosec #Infostealer #MaaS #MFA Bypass #Session Cookie Theft #Storm Malware #Varonis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:01:38 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #browser security #Chrome 127 #Credential Theft #cybersecurity #infosec #Infostealer #MaaS #MFA Bypass #Session Cookie Theft #Storm Malware #Varonis
Daily CyberSecurity
Storm: 2026’s Newest Infostealer Bypasses Chrome to Hijack Your MFA Sessions
Storm malware bypasses Chrome security by shipping encrypted files for server-side decryption. Learn how it steals session cookies to defeat MFA in 2026.