State-sponsored hackers embrace ClickFix social engineering tactic

Published on April 20, 2025

ClickFix attacks are being increasingly adopted by threat actors of all levels, with researchers now seeing multiple advanced persistent threat (APT) groups from North Korea, Iran, and Russia utilizing the tactic to breach networks. [...]

Continue reading on website
Other news

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures

April 20, 2025
The Russian state-sponsored threat actor known as APT29 has been linked to an advanced phishing campaign that's targeting diplomatic entities across Europe with a new variant of WINELOADER and a previously unreported malware loader codenamed GRAPELOADER."While the improved WINELOADER variant is still a modular backdoor used in later stages, GRAPELOADER is a newly observed initial-stage tool

Phishers abuse Google OAuth to spoof Google in DKIM replay attack

April 20, 2025
In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google's systems, passing all verifications but pointing to a fraudulent page that collected logins. [...]