August Phish Flood Warning: Credential Attacks Raining Down From Cloudflare 八月记录显示钓鱼攻击激增，涉及微软支持诈骗、Adobe文件共享和无纸化邮寄交付。攻击者利用MFA中继套件和CloudFlare基础设施逃避检测，并针对亚马逊和雅虎等个人账户发起攻击，尤其在工作设备上。... 2025-8-30 17:46:4 | 阅读: 15 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com clicked z13 windows phishing microsoft

Inside August’s Phishing Heat Wave: Support Scams, Paperless Post Lures, and MFA Abuse 八月份微软支持诈骗激增，诈骗者利用键盘锁定、设备指纹识别和MFA中继等手段诱骗用户拨打特定电话或泄露信息。类似攻击也针对金融服务客户，提醒加强防范。... 2025-8-16 19:31:16 | 阅读: 17 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing microsoft clicked kentucky 14th

Inside August’s Phishing Wave: Support Scams, Paperless Post Lures, and MFA Abuse 八月份微软支持诈骗激增，骗子利用键盘锁定、设备指纹识别和MFA中继等手段诱骗用户拨打客服电话或泄露敏感信息。钓鱼攻击通过定制IP地址、PDF文件和邀请链接传播，并针对金融服务客户实施类似手法。... 2025-8-16 19:16:20 | 阅读: 21 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing microsoft clicked kentucky 14th

Summer Surge: Sophisticated MFA Phishing Attacks Target Microsoft and Banking Users Phishing targeting users on work devices is not slowing down over the summer, with many empl... 2025-8-1 19:17:21 | 阅读: 47 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing microsoft clicked spearphish america

Microsoft Spearphish uses Telegram Bots to Evade Detection 六月底至七月初零日网络钓鱼攻击激增，针对企业Microsoft/Outlook登录和个人网络服务（如电商、流媒体和邮件），利用混淆JavaScript、伪造OAuth登录流程及Telegram数据外泄等技术绕过传统检测。... 2025-7-4 19:16:32 | 阅读: 26 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing microsoft clicked kentucky phish

Amazon Phishing Kit Harvests SSNs, Bank Access Numbers, and More 6月初至中旬，针对亚马逊、微软和Netflix账户的钓鱼攻击激增，利用高级规避技术收集敏感信息如社安号和银行账户数据。... 2025-6-19 01:47:19 | 阅读: 34 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing clicked microsoft voicemail security

ID.me and Government Data Targeted in IRS Phishing Campaign 2025年5月底至6月初，零日钓鱼攻击激增，目标包括企业登录凭证、亚马逊账户及美国政府服务（如ID.me用于IRS）。攻击者采用多层加密、剪贴板劫持及模拟微软工具等技术绕过安全过滤。建议企业加强防火墙封锁域名、提升员工安全意识并强制使用多因素认证。... 2025-6-8 17:46:55 | 阅读: 20 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing clicked microsoft kentucky irs

Instagram Lures, Microsoft Spoofs, and SIM Swaps: A Mid-May Phishing Breakdown 2025年5月中旬出现复杂零日钓鱼攻击活动，针对社交媒体、电商、企业邮件等多领域。攻击者利用合法云服务及被黑基础设施提升可信度，并通过伪装成Adobe、Netflix等品牌诱导用户泄露凭证。建议加强防火墙封锁域名、提升员工安全意识并启用多因素认证以应对威胁。... 2025-5-29 00:1:49 | 阅读: 20 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing cloud clicked microsoft at&t

May 2025 Phishing Surge: Stealth MFA-Bypass Attacks Target Microsoft & Webmail Users 5月初零日网络钓鱼攻击激增，绕过多因素认证（MFA），针对企业邮箱及员工个人服务账户。攻击者使用多步骤登录、假MFA提示、设备指纹识别等技术，部分钓鱼链接甚至利用可信云托管或子域名伪装。传统安全工具未能及时检测到这些攻击。... 2025-5-13 23:31:0 | 阅读: 20 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing microsoft victim security clicked

Pixm’s Zero-Day Threat Intelligence April 14, 2025 四月初持续针对企业凭证和个人账户的钓鱼攻击增多，利用隐蔽手段和文件共享平台进行攻击。金融服务和Netflix相关钓鱼活动显著增加，并常包含技术支持组件。Kentucky地区出现大规模微软、Okta和GoDaddy伪装页面攻击，部分通过合法网站劫持实施。建议封锁恶意域名、加强员工安全意识并启用多因素认证以应对威胁。... 2025-5-10 19:1:3 | 阅读: 10 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing kentucky clicked security georgia

Pixm’s Zero-Day Threat Intelligence April 1, 2025 3月后半段钓鱼攻击激增，主要针对Microsoft和Outlook凭证及金融服务用户，通过文件共享平台如SharePoint和OneDrive传播。Instagram出现病毒式钓鱼骗局。建议企业封锁恶意域名、加强员工安全意识并启用多因素认证以降低风险。... 2025-4-4 01:1:5 | 阅读: 21 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing clicked chase viral invitation

Pixm’s Zero-Day Threat Intelligence March 17, 2025 过去两周零日钓鱼攻击激增，主要针对微软、Outlook等平台的凭证。攻击者利用云存储服务隐藏恶意活动，传统安全软件未能检测。建议封锁域名、提醒用户风险、教育验证支持号码及启用多因素认证。... 2025-3-19 02:3:52 | 阅读: 26 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing clicked microsoft pixm surge

February 17, 2025 Zero-Day Threat Intelligence 过去两周针对微软、谷歌和雅虎账户的钓鱼活动增加，攻击者利用非邮件通讯工具和地理位置相关URL提升可信度。涉及多个钓鱼网站案例，并建议封锁特定域名、加强安全意识及启用多因素认证以降低风险。... 2025-2-28 03:1:4 | 阅读: 35 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing clicked yahoo kentucky security

February 2025 Zero-Day Threat Intelligence 过去两周网络钓鱼活动激增，攻击者利用云平台托管钓鱼页面绕过检测机制。目标包括Instagram、微软和花旗银行等平台，并出现大量恶意软件。建议封锁相关域名并加强员工安全意识教育。... 2025-2-6 02:31:48 | 阅读: 42 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing windows z13 pixm clicked

January 2025 Zero-Day Threat Intelligence OverviewPIXM recorded a massive uptick in spearphishing activity as employees returned to wor... 2025-1-25 20:46:5 | 阅读: 18 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing mailbox pixm uptick

More Zero-Day Phishing Threat Intel in December OverviewDecember has continued to see targeted spearphish involving compromised mailboxes acr... 2024-12-27 21:16:1 | 阅读: 8 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing usps clicked ups kentucky

December Zero-Day Phishing Threat Intel OverviewThe last two weeks have seen an uptick in spearphish targeting corporate users on the... 2024-12-11 10:46:23 | 阅读: 18 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing cprapid clicked spearphish pixm

November Zero-Day Phishing Threat Intel OverviewPixm Security is excited to share our latest threat intelligence from our 500,000+ us... 2024-12-9 05:16:14 | 阅读: 36 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing security clicked pixm stealth

PIXM Security Launches AI-Driven Zero-Day Phishing Protection for MSP Community A new partner program offers access to PIXM’s award-winning browser-level security, protecting... 2024-10-29 07:16:1 | 阅读: 16 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing pixm security threats msps

US Public School Districts Targeted – MFA Spear Phishing Campaigns On The Rise OverviewMulti-Factor Authentication (MFA) phishing campaigns targeting teachers, staff, and e... 2024-3-6 19:3:39 | 阅读: 53 | 收藏 | Over Security - Cybersecurity news aggregator - pixmsecurity.com phishing 1575 tycoon phaas aitm