Phishing News & Attack Analysis | Hexnode Threat Watch

Phishing

eviltokens phishing

EvilTokens Phishing: How a Device-Code Attack Hit 12,000 Inboxes

Sep 23

7 min read

Jade Sleet FLATROOF

Jade Sleet FLATROOF and ROOFDECK: Securing DevOps Macs Against Backdoors

Sep 22

6 min read

blob URL phishing

Blob URL Phishing: How Browser-Generated Pages Challenge Enterprise Identity Defense

Sep 15

8 min read

AdaptHealth data breach

AdaptHealth Data Breach: Contractor Account Compromise, Cloud Apps, and Healthcare IAM Lessons

Sep 10

7 min read

Invisible Unicode Phishing Splits Words to Evade Email Filters

Invisible Unicode Phishing Splits Words to Evade Email Filters

Sep 7

7 min read

Faronics Deploy Abuse Turns Endpoint Management into an Attack Path

Faronics Deploy Abuse Turns Endpoint Management into an Attack Path

Sep 2

9 min read

WordlistLoader

WordlistLoader and SynkLoader: ClickFix, Teams Phishing, and Enterprise Endpoint Defense

Sep 1

3 min read

AnonyMousKIT

AnonyMousKIT Voice AI Phishing: Enterprise Mobile and Apple ID Security Lessons

Sep 1

3 min read

Doxing-arrest-in-Spain

Spain’s Doxing Arrest Highlights Identity Risk From Aggregated Government Employee Data

Aug 20

7 min read

Origin-Energy-data-breach

Origin Energy Data Breach: Customer Identity Exposure and Enterprise Security Lessons

Aug 19

4 min read

Healthcare Software Breach Exposes 3.8 Million Patient Records

Healthcare Software Breach Exposes 3.8 Million Patient Records

Aug 13

6 min read

Greatness PhaaS Uses RingCentral Trust to Steal Microsoft 365 Tokens

Greatness PhaaS Uses RingCentral Trust to Steal Microsoft 365 Tokens

Aug 7

6 min read

Kratos Phishing Platform Takedown Microsoft Account Security Lessons for Enterprises

Kratos Phishing Platform Takedown: Microsoft Account Security Lessons for Enterprises

Jul 27

6 min read

Spanish BEC Takedown Shows How Executive Impersonation Still Moves Millions

Spanish BEC Takedown Shows How Executive Impersonation Still Moves Millions

Jul 15

4 min read

Fake Brand Interviews Use Browser-in-the-Browser Phishing to Steal Google Credentials

Jul 9

5 min read

Fake-Shop-Receipts-Bring-Callback-Phishing-Into-Trusted-Order-Histories

Fake Shop Receipts Bring Callback Phishing Into Trusted Order Histories

Jul 1

5 min read

India .bank.in Leak Identity Risks for Financial Institutions

India .bank.in Leak Highlights Identity and Phishing Risks for Financial Institutions

Jun 30

6 min read

Node.js Implant Phishing Campaign Targets Hotels with Photo ZIP File

Node.js Implant Phishing Campaign Targets Hotels with Photo ZIP Files

Jun 29

7 min read

WhatsApp Business Document Lures Install ManageEngine for Remote Access

WhatsApp Business Document Lures Install ManageEngine for Remote Access

Jun 25

5 min read

Xsolis Data Breach Impacts Nearly 1.4 Million People After a Targeted Phishing Attack

Xsolis Data Breach Impacts Nearly 1.4 Million People After a Targeted Phishing Attack

Jun 25

5 min read

gemini phishing

Google Lawsuit Targets Alleged Gemini Phishing Operation Behind Outsider Smishing Kit

Jun 16

6 min read

Maine Data Breach Portal Abuse Exposes Identity Verification Gaps

Maine Data Breach Portal Abuse Shows Why Security Reporting Systems Need Strong Identity Verification

Jun 15

6 min read

Kyushu Electric Lost Backup Drive Exposes Removable Media Governance Gaps

Kyushu Electric Power Transmission and Distribution Co., Inc. Lost Backup Drive Exposes Removable Media Governance Gaps

Jun 12

5 min read

Microsoft Exchange Email Spoofing Ghost-Sender Exposes a Trust Gap in Hybrid Email Environments

Microsoft Exchange Email Spoofing: Ghost-Sender Exposes a Trust Gap in Hybrid Email Environments

Jun 10

6 min read

dentaquest data breach

DentaQuest Data Breach Exposes 2.6 Million Accounts and Raises Healthcare Identity Risk

Jun 9

6 min read

Operation Dragon Weave Uses Rustcloak and Azureveil Against Czech and Taiwan Targets

Operation Dragon Weave Uses Rustcloak and Azureveil Against Czech and Taiwan Targets

Jun 4

6 min read

kali365 phishing kit

Kali365 Phishing Kit Expands Beyond Microsoft 365 Through Device Code OAuth Attacks

Jun 4

6 min read

Dashlane Brute Force Attack Highlights Password Vault Identity Risks

Dashlane Brute Force Attack Highlights Password Vault Identity Risks

Jun 2

5 min read