30
30
30
55
30
30
42
42
30
30
30
30
30
42
30
30
42
30
42
BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
CloudSEK researchers found the BigBear 2.0 PhaaS kit, built on Evilginx2, has stolen over 5,100 Microsoft 365 credentials across 461 organizations in 40+ countries.
CloudSEK gained admin access to the BigBear 2.0 phishing-as-a-service panel, an Evilginx2-based adversary-in-the-middle platform operated by someone using the alias 'General Boss'. The team observed 3,331 unique victim IPs across more than 40 countries, 42 VPS nodes mostly on Vultr, and 5,137 credential records across 461 organizations, including 4,148 session cookies, 1,032 plaintext passwords, and 474 completed MFA-bypassed authentications. IT and managed service providers were the most targeted sector, raising supply-chain risk since their compromise can expose client infrastructure and privileged Azure AD access.
70
30
30
42
30
30
30
30
30
55
30
30
55
30
55
42
42
30
30
Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews
Bitdefender reports deceptive Google Play Early Access apps use deepfake celebrity ads and fake rewards to lure users into ad-fraud schemes.
Bitdefender research describes widespread abuse of Google Play's Early Access program, where developers publish deceptive apps that avoid public ratings and reviews. The apps are promoted through TikTok and Facebook ads promising cash rewards, PayPal payouts, crypto earnings, or gift cards, often using deepfakes of celebrities, but users receive only aggressive advertising. Examples include 'Chicken Road' and 'Ice Fishing' casino-style games plus trademark abuse such as apps named 'Grand Theft Auto V (Early Access)' that are later renamed. No malware is delivered, but some listings show thousands of installs.
42
55