Phish

Cybersecurity firm Group-IB has identified RemControl, a new Android banking trojan distributed through fake TVTap streaming apps. The malware uses AI-generated phishing overlays to trick users into entering banking PINs and credentials, which are then stolen. Security researchers are warning Android users to avoid unofficial app sources as the trojan spreads.

Truecaller has launched a new tool called Scam Checker, designed to help users detect fraud attempts. The feature lets users check links, phone numbers and suspicious messages for signs of scams such as phishing. The tool is being discussed in connection with both iOS and Android versions of the app.

Filippo Bernardini, the Italian man who posed as editors and agents to steal unpublished manuscripts from authors across the book world for years, is the subject of renewed attention over whether he is operating again. The New York Times revisits the scheme, which ensnared writers including Margaret Atwood, and asks whether the scammer, who faced US fraud charges, has resumed his activities.

Cybersecurity researchers are warning about a possible phishing site operating through a Weebly-hosted page that impersonates network or helpdesk services. The suspicious link has been defused and shared with a technical analysis via urldna.io so that other security professionals can inspect the domain and its infrastructure. The report has circulated in infosec communities, which frequently post such alerts to warn the public about scam pages before they spread more widely.

Cybersecurity researchers are warning about a suspected phishing site at the domain amazoninvit.com, which impersonates Amazon, likely luring victims through fake invitation or delivery messages. The domain has been submitted for technical analysis on the URLdna scanning platform, and the warning is circulating in information security communities with phishing and scam alerts.

Cybersecurity analysts are warning about a possible phishing campaign distributed through a shortened TinyURL link. A link-analysis service has published a scan of the address so that users can inspect where the redirect leads before clicking. Alerts like this circulate in information-security communities to warn people off suspicious links and demonstrate how shortened URLs can hide malicious destinations.

Cybersecurity researchers are warning about a phishing page hosted on Google Sites, sharing a defanged link and a scan report on urlDNA for analysis. The alerts circulated in infosec channels, with warnings that the site is designed to deceive visitors into handing over credentials or personal data. The use of a legitimate Google domain highlights how attackers exploit trusted hosting services.

Cybersecurity observers are warning about a possible phishing website at 21argarena4.com. The domain, which imitates the Arena of Valor ARG Arena branding, has been defanged in warnings and submitted to the URLdna scanning service for analysis. The alert is being shared within infosec communities alongside tags for phishing, scams and general cybersecurity awareness.

A scam targeting people preordering new iPhones is circulating, involving a duo-style scheme designed to trick buyers into handing over personal data. Reports warn consumers to be careful when preordering through unofficial links or offers. Advice circulating includes buying only from Apple directly and avoiding suspicious sites asking for payment or account details.

The hacking group known as Star Blizzard, linked to Russian intelligence, has broadened its range of targets and adopted new tactics to reach victims in Ukraine and beyond, according to CyberScoop reporting. The group, previously known for spear-phishing campaigns against Western officials and researchers, is shifting methods as the war continues.

Cybersecurity observers are warning about a suspected phishing site impersonating Facebook, hosted at a lookalike Blogspot address. The domain 'facebok-facebook.blogspot.com' uses a misspelling of the platform's name to trick users. A scan of the URL has been published on URLDNA so others can review the technical details. The warning is circulating among infosec communities, with users urged to treat the link as a scam and avoid entering any credentials.

Ukraine's Supreme Court has ruled that a bank is not obliged to return money stolen from a client's card if the client voluntarily gave access to her account. A woman lost almost 43,700 hryvnias after following a phishing link promising 6,500 hryvnias in aid and entering her login details, which gave fraudsters access to her account. The decision signals that responsibility can fall on customers who hand over credentials themselves.