Sucuri guide explains phishing aimed at website owners
A lookalike host login can relay a password and authenticator code into a live session; a compromised site may then host phishing pages.
Stories per day · 30 days
4 RSS
Relatedandroid4ghostbat3india3upi3accessibility-abuse2banking-malware2phishing2vishing2accessibility1banking-trojan1call-forwarding1cisa1credential-harvesting1cyble1elections1fbi1gemini1ghostx1
28 stories, newest first · one card per story
Stories tagged #smishing
Phone scams shift toward texts, voice clones, and QR codes
Consumers reported $470 million lost to text scams in 2024, and CrowdStrike says vishing doubled in early 2026.
New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs
GhostBat Android malware steals UPI PINs from 60 Indian banking apps using accessibility overlays and transparent keypads.
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
CISA and the FBI warn that phishing and smishing may target 2026 U.S. election officials.
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says Android now flags over five million suspected scam calls and texts monthly and is adding Gemini protections.
Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware
GhostBat Android malware targets 60 Indian banking and UPI apps, capturing PINs via Accessibility overlays.
The GhostX Ecosystem: Forged in Transit, Licensed to Deceive
GhostBat RAT, part of the GhostX ecosystem, steals banking PINs from Android users in India via smishing and overlays.
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
Malwarebytes says BlueKit PhaaS lets criminals launch brand-phishing sites and steal sessions in about ten minutes.
Facebook Marketplace scam uses your name and number
Scammers text fake Facebook Marketplace listings using victims' names to provoke replies and confirm live numbers.
Android Malware Turns Gemini AI Into an Assistant for On-Device Attacks
Cleafy's RATHat Android trojan uses Gemini Flash to navigate UIs and keeps shell persistence after app removal.
1
Lookout targets smishing, voice cloning, and vishing with real-time mobile protection
Lookout launched mobile protection that detects smishing, vishing, and AI voice clones in real time.
1
RatHat Android Trojan Uses AI for Automation
Zimperium says RatHat, an Android trojan, uses generative AI to control devices and steal banking credentials.
Revolut Customers Targeted with New Wave of Phishing Attacks
Phishers target Revolut customers with smishing and fake video identity checks days after a breach enabled by impersonating Italian law enforcement.
2
New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN
New Android banking Trojan RatHat uses AI-driven UI automation and ADB wireless debugging abuse to steal bank logins, OTPs, and PINs.
2
RatHat Turns Android Accessibility Into an Attack Weapon
Zimperium details RatHat, a China-linked Android trojan abusing Accessibility, wireless debugging, and generative AI to steal banking credentials and persist on phones.
5
Hackers Use Fake T-Mobile Rewards Expiry Texts to Lure Users to Phishing Sites
Malwarebytes tracks a T-Mobile smishing campaign using 1,000+ fake rewards-expiry text templates and 81+ disposable .top domains to steal credentials and payment data.
4
Scammers Tell T-Mobile Users Their Rewards Are Expiring to Trick Them Into Clicking Phishing Links
Malwarebytes tracked a large T-Mobile smishing campaign using 81+ rotating .top domains and 1,000+ template variants to harvest credentials via fake rewards-expiry lures.
10
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Zimperium details RatHat, a China-linked Android malware using smishing, Accessibility abuse, local ADB self-pairing, and generative AI to persist after uninstall and steal data.
2
Revolut phishing texts appear days after data breach
Phishing texts impersonating Revolut targeted customers days after the fintech disclosed a social-engineering breach exposing IDs, verification selfies, and statements.
3
New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data
Zimperium details RatHat, a new Android banking trojan using a generative AI engine to automate credential and OTP theft.
9
T-Mobile rewards points expiry texts are a phishing scam
Malwarebytes tracks an SMS phishing campaign, active since May 2026, impersonating T-Mobile rewards expiry with 1,000+ templates and 81 rotating domains to lure victims.
2
New Android Malware Steals Banking PINs and Reinstalls Itself After Users Delete It
Zimperium identified RatHat, an Android banking trojan capturing PINs via overlays and abusing Wireless Debugging to reinstall itself after removal.
2
RatHat Abuses Android Wireless Debugging to Gain Shell Access and Steal Banking PINs
New Android banking trojan RatHat abuses Wireless Debugging to gain shell access and steals banking PINs and OTPs via raw touch capture.
3
Smishing Hackers Can Watch Every Keystroke as Victims Enter Card Details and OTPs
Group-IB details the JWR smishing kit, used by the Outsider cluster, that streams keystrokes and OTPs to fraudsters in real time via WebSocket.
1