BioCatch reports that social engineering scams are rising in Spain, where criminals manipulate legitimate bank customers into giving attackers access to their screens or devices. The report also links increased malware activity to job and investment scams that persuade victims to install fake work portals or trading applications.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
That investment offer has a catch: install their app first. The page sends you to a download outside the app store. A job offer can use the same trick: 'Install the work portal to continue your application.' Both downloads can carry malware. Here's the tell: normal account access or an interview shouldn't depend on installing mystery software. Some scams then coach you to share your screen or hand over device access while banking. Before installing anything or sharing your screen, contact the organization through its official website.
Researchers described a real scam where criminals called victims pretending to be bank support and convinced them to install a “legitimate” Android app. The app was actually SpyNote malware, giving the attacker remote control of the phone, after which a second tool (WindRelay) was used to relay…
Researchers observed real campaigns where a fake “AI crypto trading agent” website tricked victims into downloading malware that silently replaces browser wallet extensions and steals the wallet password when it’s typed. The same reporting also describes invoice emails using QR codes to push…
Sophos reports real incidents where attackers impersonated well-known AI brands (especially Claude) to trick people into installing malware. The lures included polished fake installer pages that instruct victims to copy/paste commands, and browser extensions that look legitimate via high ratings…
Researchers described a real scam where criminals impersonated a bank on a phone call to trick a victim into installing a malicious Android app. The attackers then remotely controlled the phone and guided the victim to tap their payment card and enter their PIN, allowing real-time contactless fraud…
Researchers describe a real phishing-driven malware operation ("PhantomEnigma") that abuses compromised Brazilian government websites and mailboxes to appear trustworthy. Victims are lured with fake law-enforcement style documents (e.g., “Ofício” summons or “Procuração Digital”) and pushed to…
Researchers report multiple real-world email phishing campaigns that used tax and government-benefit themes to trick people into downloading malware. The campaigns used a “crypter” service called Cruciferra to hide malicious files and help malware run while avoiding detection. Targets included…
