Phishing

Hackers are using a sophisticated social engineering ruse targeting IT help desk staff to gain initial access to healthcare organizations.

BleepingComputer reports that phishing attacks with an updated JSOutProx remote access trojan variant have been deployed against financial entities in South and Southeast Asia, the Middle East, and Africa.

Organizations in the oil and gas industry have been targeted with a phishing campaign that involved the deployment of a new Rhadamanthys information-stealing malware variant, The Hacker News reports.

StateScoop reports that New York City has limited access to its payroll system for more than a week now following the discovery of an SMS phishing, or smishing, campaign, which sought to facilitate personal data theft.

Tactics include “tricking” the AI into believing it is in “development mode” or roleplaying.

Nearly 250 Indian nationals who were forced into performing cyber fraud schemes in Cambodia have already been repatriated by the Indian government, according to The Hacker News.

Industrial, manufacturing, financial, trading, travel, and government organizations in the U.S., Mexico, Colombia, Brazil, Argentina, Dominican Republic, Spain, and Portugal have been targeted with new attacks by the TA588 cybercrime operation distributing the Venom RAT malware, The Hacker News reports.