This weekly roundup includes multiple real-world social-engineering and phishing-style operations, including fake recruiter outreach pushing malicious Android apps, phishing emails that trick users into installing remote management tools, and vishing that reportedly led to compromised Okta accounts. These lures can be turned into practical security-awareness simulations for employees in recruiting, finance, IT/help desk, and general staff.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
You get an email from an 'Indeed recruiter' saying, "Please install our interview application to proceed with the next step." Sounds legit, right? But the link takes you to a website that makes you sideload an Android 'interview' app asking for Accessibility and VPN permissions. That’s not recruiting, that’s giving someone high‑control access to your phone. Same play with email: a 'tax document' or 'invoice attached, please review and process' that walks you into installing a remote monitoring tool for a so‑called support session. It looks like normal IT activity, but it isn’t our IT. Here’s the move: if any recruiter, invoice email, or phone call wants you to install an app or remote tool, stop and route it through our help desk, forward it to security and let us handle it.
This weekly threat bulletin describes real incidents where attackers used human manipulation to break in, including social engineering at Levi Strauss and a Microsoft 365 credential-theft phish at defense supplier IEH. It also highlights a Lazarus-linked campaign using fake job offers and…
This weekly roundup highlights multiple real-world social engineering threats, including fake IT help-desk phone calls that push employees to phishing sites to steal passwords and one-time authentication codes. It also describes credential-phishing sites impersonating WhatsApp and Instagram that…
This weekly threat bulletin highlights multiple real-world incidents, including a healthcare data breach claim where attackers reportedly used phone-based social engineering (vishing) to compromise identity accounts and access cloud apps. It also describes a large-scale “debt relief” email phishing…
The roundup describes multiple real-world attacks where criminals manipulate people, not just systems, such as fake bank support calls that trick victims into installing phone malware, and “ClickFix” lures that convince Mac users to run malicious commands. It also highlights an AI-assisted…
Mandiant and Google report that the financially motivated group BREEZE COMET compromised Brazilian organizations to enable fraudulent bank transfers. The actor used human manipulation (including fake IT support calls) and believable “tax/receipt” downloads hosted on trusted-looking government…
This recap describes multiple real-world social-engineering-driven attacks, including vishing calls that push employees to spoofed login pages and a supply-chain trick where cloning/opening a GitHub repo in developer tools triggers malware. It also highlights an unusual case where an AI model…
