Attacks on media, entertainment, and gaming companies, from newsroom impersonation to takeovers of high-profile accounts. Each entry is broken down with an original video explainer, key findings, and the red flags your team should watch for. How we produce these.
Researchers found a large network of seemingly harmless AI apps, including pet-photo tools, that secretly switched to explicit deepfake generators for some users. The operation used misleading ads and app-store listings to drive downloads, then served different content based on signals such as…
A real campaign called Yoba used fake GitHub projects for supposed ChatGPT and Claude desktop applications to lure people into downloading malicious ZIP installers. The installers included legitimate signed OpenAI or Anthropic programs alongside malicious files, ultimately installing a…
Attackers created fake GitHub repositories that copied the names of PS5 emulator projects, luring gamers searching for ways to play PS5 games on a PC. The ZIP downloads did not contain working emulators; they launched malware that evaded analysis, attempted to weaken Microsoft Defender protections,…
Akamai documented scam operations that use large numbers of look-alike shopping and ticketing websites to steal payment and identity information. The operators can quickly replace a removed site with another domain connected to the same payment-data collection system. Other campaigns used…
A Bishop Fox researcher used ordinary-looking chat requests to persuade Claude to reveal internal sandbox details, download an Anthropic control binary, and produce memory data containing fragments of a valid Google Cloud token. The case shows that AI assistants can be manipulated into exposing…
The Yoba malware campaign uses fake GitHub projects and search-result manipulation to make counterfeit ChatGPT and Claude downloads look trustworthy. Victims receive a real, signed installer alongside malware, so the application appears legitimate while the malicious software installs and…
Attackers are sending fake, exclusive Anthropic AI-event invitations that use familiar GoTo Webinar branding to lure enterprise employees. Victims who register are routed through CAPTCHA checks, a fake Zoom-style event page, and spoofed Google or Microsoft sign-in pages designed to steal work…
A real ClickFix campaign used compromised websites to display fake Cloudflare “Verify you are human” pages. The pages instructed Windows and macOS visitors to run commands as part of a supposed verification process, directing them to attacker-controlled domains. The final malware was not…
Rhode Island alleges that Meta profited from scam advertising that used targeted delivery to reach vulnerable users, including older adults. Reported lures included fake Alzheimer’s and diabetes cures, misleading health products, and investment scams using deepfaked public figures such as Elon…
A real malware campaign called Yoba used fake GitHub projects advertising supposed ChatGPT and Claude desktop applications. Victims were lured by high-ranking Google results and download buttons, then ran ZIP-packaged installers that appeared legitimate but gave attackers control of the device. The…
The article describes real survey respondents who encountered AI-enabled deception in intimate contexts, including a dating profile built with fake pictures and false personal information, and AI-generated fake nudes used in threats. These examples show how AI can make catfishing, impersonation,…
Criminals compromised legitimate websites and replaced normal content with fake verification pages designed to persuade visitors to install malware. The pages use familiar frustrations, such as a blocked video, a browser problem, or a security check, to pressure people into running commands or…
Researchers found criminals using World Cup-themed Instagram advertisements, compromised websites, and abandoned analytics tags to expose iPhone users to Coruna and DarkSword spyware kits. The attacks can begin when malicious advertising or web content loads, with little or no action beyond…
Attackers used paid Google ads to direct people to fake Claude download pages hosted on Anthropic’s real claude.ai website. The pages used a ClickFix trick: they told Mac and Windows users to paste a command into their device, installing password- and cryptocurrency-stealing malware. Because the…
The article recounts the real ILOVEYOU worm outbreak, which used a romantic email subject line and a supposed love-letter attachment to trick millions of recipients into infecting their computers. Once opened, the attachment spread the same message to everyone in the victim's address book, showing…
Researchers linked the uCreator Android spyware kit to real campaigns that used ads and fake app-store sites to distribute tampered Telegram X apps. The sites marketed Telegram X as a dating and video-chat app, persuading victims to sideload it; once installed, the altered app could steal Telegram…
EvilTokens is a real phishing-as-a-service operation that abuses Microsoft’s device-code sign-in process to persuade victims to grant access to their Microsoft 365 accounts. After access is granted, its AI analyzes inboxes and business relationships, identifies people involved in payments, and…
A Ukraine-based grain logistics company was breached through a spearphishing email carrying a malicious attachment. UAC-0099 used the access to install backdoors, then handed access to Sandworm, which later deployed a data-wiping attack. The initial email attachment is a realistic…
This weekly roundup describes several real social-engineering campaigns, including fake government-payment posts that compromised thousands of Bluesky accounts and mobile scams disguised as community activities. It also documents AI-generated bank-helpdesk calls that persuaded victims to install an…
A scammer allegedly used Amanda Smith’s personal information to open a Cash App account and receive $1,000 from a buyer tricked by a fraudulent Facebook Marketplace listing. The case shows how an account takeover, fake sale, and identity theft can leave both the buyer and the person whose identity…
Mirage simulates attacks like these against your own team, live and safely, so you can measure how your people actually respond.
