MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
Wazza, a sophisticated phishing kit, targets banking, government, and manufacturing sectors across the US, EU, and Australia. It features advanced filtering, session management, and traffic controls beyond basic credential-harvesting pages, representing an evolution in phishing infrastructure.
Attackers registered teams-online[.]com, a fake domain mimicking Microsoft Teams' login interface, to steal work credentials through phishing. The newly registered site evaded Microsoft Defender detection, posing a risk to organizations using Teams for communications.
Cofense webinar discusses how Secure Behavior Management with AI-driven platforms can better measure employee ability to recognize real phishing threats, going beyond traditional training completion metrics to assess actual security behavior in production email environments.
Attackers are embedding AI prompt injections within phishing emails to manipulate both humans and AI security systems. Barracuda discovered emails crafted to bypass AI-based email filters while deceiving human recipients. This emerging technique poses a dual threat to email security defenses.
Earth Sirrush, a Russia-aligned APT group, targets Ukrainian organizations using phishing emails with PNG steganography and malicious Notepad++ plugins to deploy espionage malware. Attacks focus on government, defense, and logistics sectors since 2022, employing tailored phishing and document-based delivery methods.
Attackers created fake AI chatbot ad portals impersonating ChatGPT, Gemini, and Claude to harvest user credentials and MFA codes. This human-operated phishing platform targets business users seeking legitimate advertising tools for AI services, posing a significant email-delivered threat vector for credential compromise.
Article discusses how SOC and MSSP leaders can improve threat monitoring through intelligence-led approaches to detect phishing and malware campaigns faster. It critiques outdated log-collection models and advocates for better alert triage and incident response methodologies.
Nikkei disclosed that two employee cloud accounts were compromised; attackers used one to send 9,000 phishing emails. This incident highlights risks of compromised cloud credentials being leveraged for large-scale phishing campaigns targeting external recipients.
Star Blizzard, a Russian threat actor, is targeting 100+ organizations with phishing campaigns using a new RedFlick technique that delivers CosmicPulse backdoor via scheduled tasks, representing a significant escalation in their attack infrastructure.
China-aligned TA419 conducted phishing campaigns impersonating economists and AI policymakers to target U.S. AI policy experts at think tanks, universities, and legal organizations. The group used Microsoft AitM (Adversary-in-the-Middle) techniques to steal credentials. This represents a sophisticated espionage threat targeting influential figures in AI policy.
Apple's iCloud had email spoofing flaws allowing free account holders to spoof any @icloud.com address while passing SPF, DKIM, and DMARC checks. The vulnerabilities have been remediated. This directly impacts email authentication security.
Chinese hacking campaigns target AI firms and Asian governments using phishing impersonation tactics. These operations pose strategic risks through credential theft and initial access vectors, relevant to organizations managing email security and threat intelligence.
Chinese espionage group TA419 impersonated AI policy figures including an Anthropic executive in phishing campaigns targeting US university researchers, think tanks, and law firms. The spoofing campaigns, detected by Proofpoint in July, aimed to compromise AI policy experts' credentials.
Chinese-linked TA419 hackers impersonated senior Anthropic employees and policy figures in phishing campaigns targeting US AI policy experts at think tanks and universities. The credential-theft effort aims to steal cloud access and intelligence on US AI policy, regulations, and export controls.
China-linked group TA419 targeted U.S. AI policy experts via phishing emails impersonating officials and Anthropic staff. The campaign sought cloud account access at think tanks, universities, and law firms amid U.S.-China AI competition.
The week's most important email-security news, curated and summarized — every Monday morning. No tracking, one-click unsubscribe.