Sucuri guide explains phishing aimed at website owners
A lookalike host login can relay a password and authenticator code into a live session; a compromised site may then host phishing pages.
Stories per day · 30 days
1 RSS
Relatedadversary-in-the-middle1cisco-talos1credential-harvesting1google1mfa1phishing1quishing1smishing1taiwan1uat-119851website-owners1
6 stories, newest first · one card per story
Stories tagged #spear-phishing
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Cisco Talos says UAT-11985 uses fake event invites and Google AitM phishing against Taiwan research affiliates.
9
FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers
The FBI seized seven domains for Microscan and FishHub tools used by China-linked Flax Typhoon contractor Integrity Technology Group.
3
Engineered Persuasion: Evaluating Personalized Pretexts in LLM-Generated Spear Phishing
A study of 180 US workers found each LLM phishing personalization level raised click-intention odds by 28%, but credibility depends on context fit.
Tracking Elirks Variants in Japan: Similarities to Previous Attacks
Unit 42 links new Elirks backdoor variants attacking Japanese organizations to 2012 Taiwan attacks, delivered via spear-phishing PDFs exploiting Adobe Flash CVE-2011-0611.
MILE TEA: Cyber Espionage Campaign Targets Asia Pacific Businesses and Government Agencies
Unit 42 names MILE TEA, a cyber-espionage campaign since 2011 targeting Japanese and Taiwanese businesses and government agencies with e-ticket phishing lures and Elirks-family malware.