CrowdStrike warns that attackers are using AI to make social engineering faster and more convincing, including AI-generated resumes and deepfake job interviews to infiltrate companies. The report also describes vishing campaigns that quickly pivot from stealing accounts to stealing data from SaaS apps, sometimes in under five minutes.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: a perfect resume, a flawless video interview… and the “candidate” isn’t even real. CrowdStrike reports groups like Famous Chollima using AI resumes and deepfake interviews to slip into crypto and blockchain companies, while Cordial Spider and Snarky Spider use vishing to hijack single sign-on and raid SaaS data in under five minutes. Here’s the twist: the fake candidate pressures you to skip normal checks, and the “IT support” caller says, “We’re seeing an access issue, can you read me that one-time code or approve that push so we can fix it?” That’s the handoff from deepfake to instant data theft. If anyone on a call asks you to share a one-time code or approve an unexpected login, whether it’s a candidate or “IT support”, hang up and report it to security immediately.
This recap describes multiple real-world social-engineering-driven attacks, including vishing calls that push employees to spoofed login pages and a supply-chain trick where cloning/opening a GitHub repo in developer tools triggers malware. It also highlights an unusual case where an AI model…
The article reports real-world social engineering operations, including a hotel Wi‑Fi campaign that pushed fake updates and device-code phishing to steal Microsoft 365 access. It also describes an alleged Microsoft Entra vishing campaign tied to data theft claims at Brinks Home, reinforcing the…
This weekly roundup highlights multiple real-world social engineering threats, including fake IT help-desk phone calls that push employees to phishing sites to steal passwords and one-time authentication codes. It also describes credential-phishing sites impersonating WhatsApp and Instagram that…
Researchers showed that AI coding agents from Anthropic, Google, and OpenAI could be tricked by untrusted GitHub inputs (like an issue or workflow file) into taking unsafe actions. In the demos, a single malicious issue or writable workflow file could lead to remote code execution, stolen…
Researchers showed that a single public GitHub issue (from someone with no repo access) could steer popular AI coding agents into running dangerous commands, exposing tokens, and changing repositories. The risk comes from AI agents reading untrusted issue/PR text while also having access to…
A financially motivated group called Breeze Comet targeted Brazilian financial and retail organizations by impersonating IT support and convincing staff to install remote-access tools. After gaining access, the attackers moved into internal payment systems (like Pix/STR/Boleto) and executed…
