NSO Group Caught Phishing WhatsApp Users in Violation of Court Order
WhatsApp has caught the NSO Group—the Israeli spyware firm behind Pegasus—running phishing attacks against its users, in what appears to…
phishing
Researchers Tricked an AI Agent Into Leaking AWS Keys and Customer Data Using Basic Phishing Tactics
Varonis researchers tricked an OpenClaw AI agent into leaking AWS keys, database credentials, and customer records using basic social engineering. The agent caught phishing links and malicious OAuth apps — but fell for urgent-sounding emails from fake internal staff every time.
Attackers Abuse Google DoubleClick to Stealthily Deliver .NET Malware
Hackers are abusing Google’s DoubleClick domain to deliver a .NET-based RAT through targeted phishing emails. The attack chain uses dynamically personalized landing pages and process hollowing to evade detection, making it harder for security tools to flag malicious traffic.
NFCShare Malware Is Stealing Credit Cards Through Fake Banking Apps on GitHub — And It’s Spreading Fast
NFCShare Android malware has expanded from targeting a single German bank to hitting financial institutions across Italy and Spain, using fake banking app updates hosted on GitHub to steal credit card data via NFC.
2.5 Million Student Loan Borrowers Had Their Data Exposed — And Scammers Are Probably Already Planning to Use It
A breach at Nelnet Servicing exposed names, addresses, and Social Security numbers for 2.5 million student loan borrowers — and the timing couldn’t be worse with loan forgiveness scams already circulating.
Meta Catches NSO Group Running Fresh WhatsApp Phishing Campaign — Then Files Contempt Order
Meta detected a new NSO Group spear-phishing campaign targeting WhatsApp users, took down the infrastructure, and filed a contempt order — the spyware vendor was already under a permanent injunction.
19,000 FIFA-Themed Domains and Counting: The 2026 World Cup Is a Playground for Cybercriminals
Cybercriminals have registered nearly 19,000 FIFA-themed domains since January, targeting World Cup fans with phishing, ticket scams, travel fraud, and malware. The FBI and Meta have both issued warnings ahead of the 2026 tournament.
Student Loan Data on 2.5 Million Borrowers Exposed — and It’s a Phishing Goldmine
Over 2.5 million student loan borrowers had their personal data — including Social Security numbers — exposed through a breach at Nelnet Servicing. The incident comes at the worst possible timing, coinciding with federal loan forgiveness announcements.
2.5 Million Student Loan Borrowers Caught in a Breach That’s Still Haunting Them
A breach at Nelnet Servicing exposed Social Security numbers and personal data for 2.5 million student loan borrowers. With loan forgiveness in the news, phishing attacks using this data are a serious and ongoing threat.