A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.
Threat actors using a previously undocumented phishing-as-a-service (PhaaS) platform called "VENOM" are targeting credentials ...
DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...
An international operation from law enforcement authorities in partnership with private companies has disrupted FrostArmada, ...
The multi-stage campaign targeting South Korea uses weaponized Windows shortcuts and GitHub-based command and control to ...