Phishing

Flat white line-art of a smartphone showing a fake Apple Support call, with a single red alert dot, on a saturated navy background.

Phishing

AnonyMousKIT: Fake Apple Support AI Calls Strip Activation Lock From Stolen iPhones

SOCRadar's threat research unit disclosed AnonyMousKIT, a credit-metered phishing-as-a-service platform that rents AI voice agents to call owners of lost and stolen Apple devices, pose as Apple Support, and coax out the passcodes and 2FA codes that strip Activation Lock.

Isometric clay diorama of a Microsoft 365 login gate with a copied session key slipping past a two-factor lock, one flat red dot marking the stolen session.

Phishing

Mirage2FA Phishing-as-a-Service Hit 4,500 US and EU Firms by Bypassing Microsoft 365 2FA

ANY.RUN says the commercial Mirage2FA toolkit hit roughly 4,500 US and EU companies from 2024 to 2026, letting Microsoft 365 users finish a normal login before stealing the authenticated session. It bypasses 2FA, and 48% of targeted addresses were potentially compromised.

Cut-paper collage on deep navy: a reset padlock beside an intact key card, one flat red dot marking the passkey a password reset leaves behind.

Phishing

iAuthFlow V2 Phishing Kit Plants Attacker Passkeys to Survive Password Resets

Researchers at Abnormal documented iAuthFlow V2, a $10,000 phishing toolkit that registers an attacker-controlled passkey on a compromised account. Because a passkey is a credential, not a password token, it survives the reset and session revocation that normally evict a phisher.

Flat white line-art of an envelope link spawning a small robot figure inside an office doorway, on a teal background — the ChatGPT AgentForger research disclosure.

Artificial Intelligence (AI)

Researchers Disclose ChatGPT "AgentForger" Flaw That Could Deploy Rogue Workspace Agents via a Phishing Link

An AI-agent phishing vector hits ChatGPT — defender review while OpenAI's fix propagates this week.

Flat white line-art of a video-call window beside a wallet icon on an inspection stand, on a deep blue background — the BlueNoroff Zoom phishing-kit disclosure.

North Korean Threat Actors

Researchers Document "BlueNoroff" Zoom Phishing Kit Profiling Crypto Wallets Before Malware Delivery

Another BlueNoroff cryptocurrency-targeting operation lands — a defender review for crypto-industry Zoom users this week, framed around wallet-profiling awareness rather than kit mechanics.

Flat white line-art of a toppled classical column beside a browser sign-in window, on a deep teal background — the Kratos phishing-as-a-service takedown.

Policy & Government

German and US Law Enforcement Dismantle "Kratos" Phishing-as-a-Service Platform; Indonesian Arrest Made

A major PhaaS takedown lands with an international arrest — Microsoft 365 defender teams review sector-advisory posture this week.

Flat line-art of a fake official video call beside a lookalike browser window — the FBI warning on deepfake videos impersonating IC3 leadership.

Phishing

FBI Warns of Deepfake Videos Impersonating IC3 Leadership in Fraud-Revictimization Campaign

An FBI advisory on deepfake-driven revictimization of fraud victims — consumer awareness this week.

Editorial illustration of an email with hidden salt grains slipping past an AI filter lens, marking the text-salting technique seen in over a million phishing emails.

Phishing

Researchers Document "Text Salting" — Hidden-Text Technique Reportedly Bypasses AI-Based Email Security Filters at Scale

A scale-significant AI-filter-bypass research beat — defender review for AI-heavy email-security stacks this week.

Editorial illustration of a FaceTime call bubble wearing a bank mask, marking Apple's warning on FaceTime-based social engineering targeting iPhone and iPad users.

Mobile Security

Apple Publishes Warning on FaceTime-Based Social Engineering Targeting iPhone and iPad Users

An Apple advisory on FaceTime-based social engineering — defender-team end-user awareness this week.

Phishing

Researchers Document “Forg365,” a Phishing-as-a-Service Platform Targeting Microsoft 365

A new named PhaaS platform targeting Microsoft 365 — defender teams review posture and OAuth-hygiene this week.

Flat white line-art of a telephone handset beside a login window — Okta warns of vishing targeting Microsoft 365 customers.

Phishing

Okta Warns of Vishing Campaign Targeting Microsoft 365 Customers

A vishing campaign against Microsoft 365 customers draws a vendor warning — defender review this week.

Phishing

Microsoft and Trend Micro Document Blockchain-Abuse Phishing Against EU and Asia Hospitality

Two vendor-documented hospitality-sector phishing campaigns land the same week — sector-advisory work for hotel-industry defenders this week.

See all