Hackers Use Social Engineering to Target Expert on Russian Operations
Source: https://hackread.com/hackers-use-social-engineering-expert-russian-operations/
Scammers Insert Fake Support Numbers on Real Apple, Netflix, PayPal Pages
Source: https://hackread.com/scammers-fake-support-numbers-real-apple-netflix-paypal/
ChainLink Phishing: How Trusted Domains Become Threat Vectors
Source: https://www.bleepingcomputer.com/news/security/chainlink-phishing-how-trusted-domains-become-threat-vectors/
U.S. Seizes $7.74M in Crypto Tied to North Korea’s Global Fake IT Worker Network
Source: https://thehackernews.com/2025/06/us-seizes-774m-in-crypto-tied-to-north.html
Hackers Using Fake IT Support Calls to Breach Corporate Systems, Google
Source: https://hackread.com/hackers-fake-it-support-calls-breach-systems-google/
A phishing campaign is actively targeting services associated with Luxembourg, leveraging fake websites hosted and served from AWS infrastructure. This threat uses highly convincing psychological techniques to deceive users into divulging sensitive information. Although no specific vulnerable software versions are identified and no patches are available, the attack exploits social engineering rather than technical vulnerabilities. The campaign is categorized under MITRE ATT&CK pattern T1566 and is ongoing with no known exploits in the wild beyond phishing attempts. European organizations, especially those with ties to Luxembourg or using AWS-hosted services, face risks of credential theft and potential subsequent compromise. Mitigation requires targeted user awareness, email filtering, and monitoring of AWS-hosted domains mimicking legitimate Luxembourg services. Luxembourg is the primary affected country, but neighboring countries with close economic or governmental ties may also be at risk. Given the ease of exploitation and potential impact on confidentiality, the threat severity is assessed as medium. Defenders should prioritize detection and user education to reduce the success of these phishing attempts.
The 0ktapus threat group conducted a large-scale phishing campaign targeting over 130 companies, primarily aiming to steal Okta identity credentials and multi-factor authentication (MFA) codes. The attackers sent text messages with links to phishing sites mimicking the Okta authentication pages of targeted organizations. This campaign compromised nearly 10,000 accounts across more than 130 organizations, including 114 US-based firms and victims in 68 other countries. Initial attacks targeted telecommunications companies to gather phone numbers used in MFA attacks. The ultimate goal was to access internal systems and facilitate supply-chain attacks. The campaign demonstrated how attackers can bypass MFA protections through phishing. Researchers recommend using FIDO2-compliant security keys and educating users about MFA attack methods to mitigate such threats.
The NCSC report outlines the cyber threats faced by sports organisations in the UK, emphasizing risks such as business email compromise, digital fraud, and venue security challenges. It highlights the sector's economic significance and the attractiveness of sports organisations as targets for cybercriminals. The report provides statistics on the prevalence of these attacks and offers practical measures to prevent or reduce their impact. It is intended for a broad range of sports entities, from local clubs to national federations. No specific software vulnerabilities or exploits are detailed in the report.
