#abuse


Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Sep 30, 2026 // 19:40

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed […]

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Sep 30, 2026 // 18:00

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures […]

Hackers abuse Faronics Deploy admin tool to install ScreenConnect

Sep 1, 2026 // 23:56

Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative control over victim computers and install the ScreenConnect remote support software. […]

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Aug 27, 2026 // 00:41

Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while […]

Hackers abuse npm mirrors to host phishing redirect pages

Aug 26, 2026 // 00:56

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. The technique […]

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Aug 25, 2026 // 14:59

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style […]

Hackers abuse FTP server banners to deliver new Windows malware

Aug 21, 2026 // 14:17

Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. MalwareHunterTeam observed this unusual […]

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Aug 20, 2026 // 23:44

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, […]

Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse

Aug 12, 2026 // 04:16

Google says Chrome’s anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during the first quarter of 2026. The company […]

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Aug 8, 2026 // 01:08

Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim’s Windows Hello for Business key […]

1 2 3 Next