Phishers abuse Google OAuth to spoof Google in DKIM replay attack

Published on April 20, 2025

In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google's systems, passing all verifications but pointing to a fraudulent page that collected logins. [...]

Continue reading on website
Other news

State-sponsored hackers embrace ClickFix social engineering tactic

April 20, 2025
ClickFix attacks are being increasingly adopted by threat actors of all levels, with researchers now seeing multiple advanced persistent threat (APT) groups from North Korea, Iran, and Russia utilizing the tactic to breach networks. [...]

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery

April 21, 2025
Cybersecurity researchers have disclosed a surge in "mass scanning, credential brute-forcing, and exploitation attempts" originating from IP addresses associated with a Russian bulletproof hosting service provider named Proton66.The activity, detected since January 8, 2025, targeted organizations worldwide, according to a two-part analysis published by Trustwave SpiderLabs last week. "Net