Attackers gained access to The Kyiv Independent’s website management and newsletter distribution systems, then used those trusted channels to send false crisis alerts and publish fake news. The messages falsely alleged nuclear and physical attacks involving President Volodymyr Zelensky, apparently to create panic, confusion, and distrust among readers.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
A Kyiv Independent alert says Zelensky launched a nuclear warhead at Kyiv. Wait, what? This wasn't a lookalike sender. The outlet's newsletter service and website management were accessed. False emails in Russian and English said seek shelter and follow an anonymous Telegram channel. That's the trick: real channels can carry fake news. Other messages invented a physical attack on Zelensky. An extraordinary emergency claim needs confirmation beyond that publisher's email or website. Before sharing that alert or opening its Telegram channel, check official emergency updates and independent trusted sources.
Researchers say the Kazakhstan-linked group “Silent Lynx” has run real espionage campaigns across Central Asia, targeting government bodies and energy organizations. The reported entry method relied heavily on spear‑phishing sent from compromised government email accounts, sometimes using trusted…
Researchers observed a real phishing campaign that abused Microsoft 365’s “Direct Send” feature to deliver messages that looked like they came from trusted internal addresses (HR, accounting, admin). The emails commonly used familiar business lures like invoices, payment approvals, voicemail…
Research says a North Korea–linked operation (“PurpleDelta”) is using fake identities to apply for large volumes of remote IT jobs, sometimes successfully getting hired. Once inside a company, these “employees” can record meetings and steal sensitive information such as source code and internal…
Hackers reportedly compromised emergency-alert apps in Ukraine and Russia and used them to send false warnings of nuclear, radiation, chemical, and military threats. The incident exploited fear during an active conflict, and Ukrainian officials warned that at least one message included a link that…
The article describes a real 2024 New Hampshire robocall that used an AI-generated voice impersonating President Biden. The call urged Democratic voters to stay home during the primary and wait until the November election, illustrating how voice deepfakes can be used to suppress turnout and…
North Korean-linked actors are using fake identities to get hired into remote IT roles, then leveraging that trusted access to steal data or attempt to deploy malware. The article describes real cases (including KnowBe4 and Netskope) and explains how the scheme scales using fabricated personas,…
