Malwarebytes Labs reports that phishing emails are now being aimed at AI assistants as…

· in brief

Malwarebytes Labs reports that phishing emails are now being aimed at AI assistants as well as people. Researchers found messages with hidden instructions that could make a summarizing tool describe an email as legitimate or urgent, or even suggest changing vendor payment details. The advice is to check the original message before acting on any recommendation about money or sensitive information, verify payment changes through a separate trusted channel, and keep AI assistant permissions limited.

Malwarebytes LabsPhishing emails are baiting your AI assistant

Source: malwarebytes.com

More in this rubric
all →

Cyberscoop.com reports that federal authorities arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on charges of conspiracy of extortion. Court records say the case involves threats to the confidentiality of information to extort money, and the filing has been moved to the Eastern District of Texas. Ordinary users should stay alert to ransomware and extortion scams that pressure victims into paying.

cyberscoop.comCanadian cybersecurity executive arrested in federal extortion case

Source: cyberscoop.com

KnowBe4 says attackers are abusing trusted services like DocuSign, SharePoint, Adobe Sign, Dropbox and Google Drive to send phishing emails that look legitimate. In its analysis of 544,000 threat emails between June and August 2026, LOTS techniques accounted for 53,000 emails, with DocuSign and QuickBooks making up nearly two-thirds of that volume. The post says these emails can bypass security gateways because they come from real platforms. Windows users and small offices should be careful with document-share and payment messages, even when the sender looks trustworthy.

KnowBe4The Rise of Legitimate-Service Phishing: 1 in 10 Phishing Emails Now Comes From a Platform You Trust

Source: blog.knowbe4.com

Hackread.com reports that the DOJ has charged MonsterCloud CEO Zohar Pinhasi with wire fraud and conspiracy to commit wire fraud. Prosecutors say he claimed the company could recover encrypted files without paying a ransom, but instead paid attackers for decryption keys and charged victims much higher fees. The FBI and CISA advise against paying ransoms, since payment does not guarantee files will be recovered or stolen data will not be leaked.

hackread.comMonsterCloud CEO Zohar Pinhasi Accused of Paying Hackers, Defrauding Victims

Source: hackread.com

5,480 members already hereReading, writing, commenting and voting. 0 verified · 205 joined this year