
Hackers Use Fake Government Websites to Deliver SimpleHelp
Phishing campaign impersonates Israel Tax Authority to install SimpleHelp remote access software on Israeli targets.
1
4 stories, newest first · one card per story

Phishing campaign impersonates Israel Tax Authority to install SimpleHelp remote access software on Israeli targets.

SOCRadar found 46 INC encryptor builds, notes on 62 organizations, and more than $23,920 in recorded AI spend.

Attackers chained two PaperCut NG/MF zero-days for unauthenticated access, installing SimpleHelp and AnyDesk remote access tools on compromised servers.
Metasploit adds a module chaining SimpleHelp OpenID Connect authentication bypass to remote code execution, tracked as CVE-2026-48558.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views