phishing service Archives

Using QR codes in PDF attachments, a new phishing-as-a-service (PhaaS) platform called ONNX Store targets Microsoft 365 accounts for staff members of financial institutions. The software uses Telegram bots to operate and has two-factor authentication (2FA) bypass techniques. It can target both Microsoft 365 and Office 365 email accounts. The activity was found by researchers at EclecticIQ, and they suspect that ONNX is a renamed Caffeine phishing kit run by the threat actor MRxC0DER, who speaks Arabic. When the platform began focusing on Russian and Chinese platforms rather than Western services in October 2022, Mandiant made the discovery of caffeine read more about ONNX phishing service targets Microsoft 365 accounts at financial firms. Get up to date on the latest cybersecu...

Using 20,000 domains, a new phishing-as-a-service (PhaaS) called "Darcula" targets Android and iPhone users in more than 100 countries by impersonating brands and stealing login information. With over 200 templates available to fraudsters, Darcula has been used against a wide range of businesses and companies, including telecommunications, airlines, utilities, financial, government, and postal sectors. The service is unique in that it sends phishing messages to targets over the Rich Communication Services (RCS) protocol for Google Messages and iMessage rather than SMS. Although security researcher Oshri Kalfon initially reported about Darcula last summer, Netcraft experts have noted that the platform has become increasingly prevalent in the world of cybercrime and has been utiliz...

Tag: phishing service

ONNX phishing service targets Microsoft 365 accounts at financial firms

New Darcula phishing service targets iPhone users via iMessage