Category: Credential Theft
-
Fake “Secure Message” Emails Used to Steal Email Credentials
Threat Level: 🔴 HighThreat Type: Phishing / Credential Theft What’s Happening Cybersecurity researchers are warning about a phishing campaign using fake “secure message” notifications to trick users into revealing their email credentials. These emails claim that the recipient has received a secure encrypted message from a coworker, financial institution, healthcare provider, or legal service. The…
-
Massive Education Data Breach Affecting Schools and Colleges
A major cyberattack targeting the Instructure Canvas learning management system is making headlines this week. Attackers linked to the ShinyHunters group claim to have stolen millions of student and staff records from schools and colleges worldwide. Reported data may include names, email addresses, student IDs, and private messages. For anyone working in education — especially…
-
“Password Manager Alert” Emails Used to Steal Master Passwords
Threat Level: 🔴 HighThreat Type: Phishing / Credential Theft What’s Happening Cybersecurity researchers are warning about a phishing campaign targeting users of password managers with fake security alerts. These emails claim that there has been suspicious activity on the user’s password manager account and urge immediate action to secure it. The message typically includes a…
-
“Account Verification Required” Pop-Ups Used to Capture Login Credentials
Threat Level: 🔴 HighThreat Type: Phishing / Credential Theft What’s Happening Cybersecurity researchers are warning about a surge in fake “account verification required” pop-ups appearing on websites and mobile devices. These pop-ups claim that the user must verify their account to continue browsing or access content. They are often designed to look like legitimate prompts…
-
Fake Google Chrome Update Websites Install Malware
Threat Level: 🔴 HighThreat Type: Malware / Phishing What’s Happening Cybersecurity researchers have identified a campaign using fake Google Chrome update websites to distribute malware. Attackers are redirecting victims to websites that closely mimic the official Google Chrome update page. According to reporting from BleepingComputer, these malicious sites display warnings that the user’s browser is…
-
Tax-Season Phishing Emails Using Fake W-2 Documents
Threat Level: 🔴 HighThreat Type: Phishing / Credential Theft What’s Happening Cybersecurity researchers have detected a phishing campaign that uses tax-related emails and fake W-2 documents to trick victims into revealing login credentials. According to security analysis from Microsoft Threat Intelligence, attackers are sending emails with subjects such as “2025 Employee Tax Docs” or “Your…
-
Phishing Campaign Targets Password Manager Users
Threat Level: ⚠️ HighThreat Type: Phishing / Credential Theft What’s Happening Security researchers are warning about a new phishing campaign targeting users of the password manager LastPass. According to reporting from SecurityWeek, attackers are sending emails that appear to warn recipients about unauthorized access or changes to their master password. The message urges users to…