phishing

Cybersecurity firm Group-IB has identified RemControl, a new Android banking trojan distributed through fake TVTap streaming apps. The malware uses AI-generated phishing overlays to trick users into entering banking PINs and credentials, which are then stolen. Security researchers are warning Android users to avoid unofficial app sources as the trojan spreads.

Truecaller has launched a new tool called Scam Checker, designed to help users detect fraud attempts. The feature lets users check links, phone numbers and suspicious messages for signs of scams such as phishing. The tool is being discussed in connection with both iOS and Android versions of the app.

Schools and organizations are sharing practical cybersecurity advice as part of Cybersecurity Awareness Month. Carthage College is reminding students to watch for phishing scams, a common tactic used to steal passwords and personal information. The guidance comes as online fraud attempts targeting students and everyday users continue to rise, prompting institutions to push simple safety habits like verifying senders and avoiding suspicious links.

Chinese-linked hackers posed as a former US official in a phishing scheme aimed at stealing emails from artificial intelligence specialists, Reuters reports. The operation used a spoofed identity to trick targets into handing over sensitive correspondence, highlighting growing concern over espionage campaigns targeting the AI sector and US expertise in the field.

Filippo Bernardini, the Italian man who posed as editors and agents to steal unpublished manuscripts from authors across the book world for years, is the subject of renewed attention over whether he is operating again. The New York Times revisits the scheme, which ensnared writers including Margaret Atwood, and asks whether the scammer, who faced US fraud charges, has resumed his activities.

Cleveland.com's daily celebrities birthdays feature for September 30, 2026 highlights Phish guitarist Trey Anastasio and Italian actress Monica Bellucci among the famous names celebrating. Such lists are a recurring fixture of entertainment coverage, offering readers a quick roundup of stars marking the day, along with brief notes on their careers and milestones.

Microsoft's security team reports that the threat actor group Star Blizzard, a known advanced persistent threat, has refined its phishing and malware delivery methods using a technique dubbed Redflick. Cybersecurity commentators are sharing the report widely, flagging the group's evolving tactics and the risk this poses to targeted organisations.

Cybersecurity researchers are flagging a possible phishing campaign hosted through a Google Docs presentation link. The URL, shared in defanged form, points to a public Google Slides page that may be used to lure victims into handing over credentials or personal data. A full technical analysis of the link has been published on a URL scanning service. Users are advised to treat unexpected Google Docs links with caution.

Security researchers are warning about a phishing site at the address facebooc-system.start.page, which imitates Facebook to steal login credentials. The deliberately misspelled domain on a free hosting service is a common scam pattern. An analysis of the site has been published on the URLDNA scanning platform, and the warning is circulating among infosec professionals.

Security researchers are warning about a phishing site impersonating Rabby, the popular Ethereum wallet browser extension. The fraudulent page, hosted on a wasmer.app subdomain, was defanged and shared with an analysis link on URLDNA so others can inspect its infrastructure. The warning spreads under standard cybersecurity and scam hashtags, urging crypto users to double-check URLs before entering seed phrases.

The US Department of War is marking Cybersecurity Awareness Month by promoting its 'Brilliant at the Basics' campaign, urging staff and the wider public to follow fundamental cyber hygiene such as strong passwords, phishing awareness and multi-factor authentication. The initiative highlights how basic defensive practices remain the department's core message against growing digital threats.

A cybersecurity researcher has raised an alert over a suspected phishing site hosted on the domain mailer05-tra.mdbgo.io, defanging the link to prevent accidental clicks. A scan report from URLDNA was shared alongside the warning so others can inspect the domain's technical details. The post circulated among infosec communities under phishing and scam tags.

Symantec reports a sharp rise in phishing attacks using SVG image files in August 2026. Attackers embed fake login pages and malware inside SVG files smuggled through email attachments, bypassing conventional detection because the files look like harmless images. Symantec has published guidance on how the technique works and what defences organisations should deploy against it.

Chinese hackers impersonated a former US official in phishing attacks aimed at stealing emails from artificial intelligence experts, according to a Rappler report. The operation suggests foreign espionage efforts are increasingly focused on the AI field, targeting specialists to gain access to sensitive research and communications. The report has drawn attention to ongoing concerns about cyber espionage between the US and China.

A cybersecurity blog has published a detailed breakdown of a modern phishing campaign abusing Microsoft OneDrive, walking through how attackers craft convincing file-sharing lures and what investigators can do to trace them. The write-up is aimed at digital forensics and OSINT practitioners, touching on the psychology behind cybercrime and the growing role of AI tools in both attacks and investigations.

Fast Company has published a checklist designed to help people protect themselves against the latest AI-enhanced scams. The piece outlines practical steps individuals can take as fraudsters increasingly use artificial intelligence to make phishing messages, voice calls and impersonation schemes more convincing, amid growing public concern over AI-driven cybercrime.

A warning is circulating telling people not to open links claiming to lead to an early pre-order page for a device referred to as the iPhone Duo. The advice suggests such pages are not legitimate and could be used to phish personal or payment details. Consumers are urged to pre-order only through Apple's official site or verified retailers.

Cybersecurity researchers are flagging a phishing campaign hosted through a Google Slides sharing link. The URL has been defanged and submitted to a URL analysis service for inspection, and warnings are circulating among infosec accounts urging users not to open such links. The case highlights how attackers continue to abuse trusted Google-hosted pages to deliver scams.

Security researchers are warning about a phishing site hosted on a Blogspot address that imitates the Facebook login page to steal credentials. A link-analysis service has published a scan of the malicious URL, and cybersecurity accounts are circulating the warning with the address deliberately defanged to prevent accidental clicks. Users are advised to avoid entering Facebook login details on unfamiliar domains.

Security researchers are warning about a phishing site impersonating Roblox at a lookalike domain, robiox.com.py, with a fake user profile page. The URL was defanged in the alert, and a scan of the link has been published on the URLDNA analysis service so others can inspect its behaviour. The warning is being shared in cybersecurity circles as a reminder to avoid clicking links resembling the popular gaming platform.

Cybersecurity observers are warning about a suspected phishing page hosted at a Weebly web address, sharing a link to a detailed technical analysis of the site on the URLDNA scanning platform. The address has been defanged to prevent accidental clicks. The warning is being circulated in information security communities alongside standard scam and phishing alert tags.

Cybersecurity analysts are warning about a phishing website hosted at a lookalike domain mimicking an identity login page, designed to steal users' credentials. The suspicious URL has been defanged and submitted to a URL analysis service, which published a scan of the site. Experts urge caution with unexpected login links.

Two-thirds of schools in England now report recovering immediately from cyber incidents, suggesting improved resilience to attacks such as ransomware and phishing. Despite the progress, teachers remain divided over who bears responsibility for security and whose job security is at risk when breaches occur, with staff often left handling technical problems outside their expertise.

Cybersecurity researchers are warning of a possible phishing page hosted on a domain mimicking the Toronto Construction Association, shared via a defanged link and analyzed through the URLDNA scanning service. The alert circulates in infosec communities, urging recipients to avoid the link and verify any communications claiming to come from the association.