Search: “ctm360”

20 stories

CTM360's RecruitTrap report documents 3,000+ recruitment phishing URLs using BitB windows to steal credentials and relay MFA.

CTM360 identified over 3,000 phishing URLs impersonating recruiters from more than 50 organizations across 14 sectors in the RecruitTrap campaign. Attacks use Browser-in-the-Browser popups with spoofed address bars to harvest Google and Facebook credentials and relay MFA prompts in real time. About 96% of pages used a Calendly theme, with infrastructure concentrated on AWS EC2 and hidden behind Cloudflare.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Phishing & fraud in the wild

CTM360 Threat Manager: Allowing users to tackle threats on the go

Help Net SecurityAug 27, 00:00 UTC · Aug 27, 2020Phishing & fraud

CTM360 report: Ransomware exploits trust more than tech

Help Net SecurityMay 22, 00:00 UTC · May 22, 2025Ransomware

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real

The Hacker NewsJul 25, 10:14 UTC · Jul 25, 2026Phishing & fraud

BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally

The Hacker NewsJul 8, 11:45 UTC · Jul 8, 2025Phishing & fraud

CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Phishing & fraud

CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat

The Hacker NewsNov 20, 11:30 UTC · Nov 20, 2025Threat actor

PlayPraetor Reloaded: CTM360 Uncovers a Play Masquerading Party

The Hacker NewsJun 24, 10:22 UTC · Jun 24, 2025Malware

CTM360 maps out real-time phishing infrastructure targeting corporate banking worldwide

Help Net SecurityMay 19, 00:00 UTC · May 19, 2025Phishing & fraud

Fake News Sites Mimicking CNN, BBC and CNBC Pave Way for Investment Sc

Infosecurity MagazineJul 14, 15:40 UTC · Jul 14, 2025Phishing & fraud

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI

The Hacker NewsAug 5, 18:14 UTC · Aug 5, 2025Malware

Fake CNN and BBC sites used to push investment scams

The RecordJul 9, 13:37 UTC · Jul 9, 2025Phishing & fraud

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

The Hacker NewsAug 10, 07:56 UTC · Aug 10, 2025Malware

Week in review: Trojanized KeePass allows ransomware attacks, cyber risks of AI hallucinations

Help Net SecurityMay 25, 00:00 UTC · May 25, 2025Ransomware CVE-2025-4322

Bogus recruiters go after high-value corporate credentials on mobile

Zimperium details browser-in-the-browser recruitment scams stealing corporate credentials on mobile, impersonating Amazon, Apple, Boeing, and Deloitte.

Zimperium reports scammers posing as HR staff use browser-in-the-browser (BitB) phishing via fake interview scheduling flows to steal corporate credentials. The kit pre-qualifies victims by rejecting personal email addresses, then captures credentials that grant OAuth tokens, internal communications, and cloud access enabling lateral movement. Domains impersonating Amazon, Louis Vuitton, Apple, FIFA, Boeing, Deloitte and others were tracked for a year, mostly hosted on AWS and SEDO, with 46 previously unpublished IOCs released.

Help Net SecurityAug 26, 00:00 UTC · 21d agoPhishing & fraud in the wild