This bulletin highlights multiple real-world threats, including voice-phishing (vishing) operations that industrialize account takeovers and a fake CCleaner download site that installs spyware. The items provide concrete, repeatable lures (a vishing-driven takeover workflow and a lookalike software download) that can be turned into realistic awareness simulations.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: your phone rings, and a "security team" walks you straight into a fake login and spyware install in under two minutes. There’s a tool called Work Panel that lets criminals spin up vishing campaigns like a call center: one button to register a phishing domain, clone your company’s login, and launch a brand-new fake site in minutes. The script sounds like this: "Hi, this is the security team about suspicious sign-in activity." They give you a login link, watch you sign in, grab your codes, then send you to a fake CCleaner site like ccleanerwind.top that drops a GhostDesk Chrome extension to steal your passwords and screenshots. Your move: if anyone calls about “securing your account” and tells you where to log in or what to install, hang up and instead use your normal bookmark or our official portal to check your account yourself.
Rapid7 uncovered an active cryptocurrency fraud operation that combined phishing emails, follow-up phone calls, and counterfeit wallet apps to trick victims into handing over wallet recovery (seed) phrases. The attackers validated and enriched phone-number leads first, then used matching “support…
This weekly threat bulletin highlights multiple real-world incidents, including a healthcare data breach claim where attackers reportedly used phone-based social engineering (vishing) to compromise identity accounts and access cloud apps. It also describes a large-scale “debt relief” email phishing…
This weekly roundup highlights multiple real-world social engineering threats, including fake IT help-desk phone calls that push employees to phishing sites to steal passwords and one-time authentication codes. It also describes credential-phishing sites impersonating WhatsApp and Instagram that…
This news roundup describes real social-engineering operations where attackers impersonate trusted support teams to trick people into giving up secrets. One campaign uses email/SMS/WhatsApp plus AI voice calls pretending to be Apple Support to steal iPhone passcodes, while another uses phishing…
The roundup describes multiple real-world attacks where criminals manipulate people, not just systems, such as fake bank support calls that trick victims into installing phone malware, and “ClickFix” lures that convince Mac users to run malicious commands. It also highlights an AI-assisted…
This weekly threat bulletin describes real incidents where attackers used human manipulation to break in, including social engineering at Levi Strauss and a Microsoft 365 credential-theft phish at defense supplier IEH. It also highlights a Lazarus-linked campaign using fake job offers and…
