-
A targeted campaign in which the ToddyCat (aka APT-style) group leverages a previously observed loader family, Umbrij, to hijack Gmail accounts by abusing Google APIs. Chaining that capability to broad remote access achieved through a malicious MSI ins…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ToddyCat, an advanced persistent threat group long associated with targeted espionage against corporate environments, has evolved its toolkit to exploit OAuth-based authorization flows and compromise Gmail accounts without directly stealing credentials…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ghostwriter (UNC1151) has escalated its long-standing phishing operations by deploying convincing fake Gmail login panels that harvest both passwords and two-factor authentication (2FA) codes, CERT Polska reports. The group historically focused on Poli…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has officially expanded Gmail’s end-to-end encryption (E2EE) feature to Android and iOS devices, empowering organizations and users to protect the confidentiality of email content directly from their mobile devices. This enhancement is part of G…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has officially moved its advanced ransomware detection and file restoration features for Google Drive out of beta, making them generally available to organizations globally. Originally launched for beta testing in September 2025, these security …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Iran-linked Handala hackers breached FBI Chief Kash Patel’s Gmail, leaking photos and documents. Officials say no classified data was exposed.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Another day, another trove of login credentials in plain text found online.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
For years, Google users have been stuck with the email addresses they created when they first signed up. If you picked an embarrassing username years ago or simply want a more professional handle, the only previous solution was to create a brand-new ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Tycoon 2FA phishing kit represents one of the most sophisticated threats targeting enterprise environments today. This Phishing-as-a-Service (PhaaS) platform, which emerged in August 2023, has become a formidable adversary against organizational se…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A seemingly legitimate Zoom document share from “HR” redirected victims through a fake bot-protection gate into a Gmail login phish. User credentials are exfiltrated live via WebSocket and validated in real time. This report breaks down the social engi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
