Multiple phishing malware threats target US enterprises
Original title: 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
SkyW4lker and GeorgeGinx phishing kits exploit Microsoft device code auth while WKLP infostealer targets government networks in US and France.
Researchers identified active campaigns exploiting legitimate Microsoft authentication and AI tools. SkyW4lker uses device code phishing to access corporate accounts. Fake AI apps and invitations steal credentials and cookies. GeorgeGinx redirects via Adobe links to Microsoft device code pages. WKLP malware disables Defender for persistent access stealing data and files. All affect US government banking healthcare organizations.
- 618 SkyW4lker sandbox analyses from June-October 2026
- 1,258 fake AI campaign analyses
- Targets US government banking healthcare
- WKLP Python RAT steals credentials and files
- Use In-Browser Data Inspection for redirects
Impact: unauthorized account access and data theft
- 1.Restrict unnecessary device-code authentication
- 2.Approve trusted AI applications
- 3.Use In-Browser Data Inspection
- Vendors
- Microsoft
- Products
- Microsoft 365
- Organizations
- US governmentUS bankingUS healthcare
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 198.23.223.185 | ted Threat Context into TI Lookup to investigate IP address 198.23.223.185 , revealing related URLs and threat activity. Related Threa |
From the original article
6 min read at thehackernews.com
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows. For enterprises, these campaigns raise the stakes beyond individual security incidents, increasing the risk of financial losses, data breaches, and costly operational disruption. Below, we examine five
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.