KnowBe4 reports that a phishing campaign is using AI-themed lures to target people who manage advertising accounts. The fake pages copy brands like Gemini, Claude, ChatGPT, Perplexity and Muse, and are built to steal passwords and intercept multifactor authentication codes. People should be careful with unexpected account-connection requests and check the real web address before entering any login details.
Source: blog.knowbe4.com
…
KnowBe4 reports that Microsoft is tracking phishing campaigns that use meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content to deliver a masqueraded MSP360 installer. The installer is a legitimate remote monitoring and management tool that attackers abuse to gain access to affected devices and keep control after the first compromise. Users should be cautious with unexpected download prompts and messages that impersonate document-sharing, collaboration, or software pages.
Source: blog.knowbe4.com
Malwarebytes Labs reports that scammers are using short text messages to start conversations, often with a name pulled from breached data. The goal is to get a reply, then build trust or push a fake investment scheme. Windows users should not answer unknown texts, even with “Who’s this?” or “Wrong number,” and should report and block the sender instead.
Source: malwarebytes.com
Malwarebytes Labs reports that phishing emails are now being aimed at AI assistants as well as people. Researchers found messages with hidden instructions that could make a summarizing tool describe an email as legitimate or urgent, or even suggest changing vendor payment details. The advice is to check the original message before acting on any recommendation about money or sensitive information, verify payment changes through a separate trusted channel, and keep AI assistant permissions limited.
Source: malwarebytes.com
