CloudSyncD Uses Invisible Unicode to Hide Phished Mac Passwords in Plain Sight
CloudSyncD, a fake Zoom macOS backdoor, hides phished passwords with invisible Unicode and calls live C2.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #credential-phishing
Microsoft Entra TrustSink Attack Uses Rogue MFA Provider to Steal Passwords
Varonis disclosed TrustSink, a post-compromise Entra technique using a rogue MFA provider to steal passwords.
Russian suspect in bank account takeovers is extradited to US
Russian web developer Sergei Filimonov was extradited from Georgia to the US to face charges in a multimillion-dollar bank account takeover fraud.
1
Cybercriminals Turn GTA VI Leaks Into Malware Bait
Attackers spread fake 113GB GTA VI builds whose 50KB payload whitelists the entire C: drive in Windows Defender, alongside credential phishing and infostealer campaigns.
1