Netcrook
#Spear Phishing
Cloud Link, Shortcut, Payload: The Quiet Phishing Chain Behind SpyGlace
A reported campaign tied to APT-C-60 shows how a legitimate file-sharing service, a Windows shortcut, and a normal developer tool can be chained into a deceptive delivery path.
One RedLine Beacon, and a Maritime Phishing Web Surfaces
A single command-and-control indicator can be enough to expose the wider shape of a credential-theft operation, especially when the target is a sector where email trust and operational continuity matter.
One Stealer IP, a Hidden Maritime Scam Grid
A single RedLine-linked host became the starting point for mapping infrastructure that appears designed for maritime-themed spear phishing and BEC support.
The Shortcut Trap: How a Cloud-Hid Backdoor Turns a Microsoft Lure into Quiet Access
A reported APT37 intrusion chain shows how a familiar brand, a Windows shortcut, and a legitimate cloud service can be stitched into a low-noise control path.
WhatsApp Draws a Hard Line as Spyware-Linked Lures Test the Boundaries of Messaging Security
WhatsApp says it detected and disrupted a new wave of spear-phishing attempts linked to NSO Group, while also seeking contempt relief over an alleged breach of a court order.
When a Government Inbox Becomes an Entry Point for Espionage
An alleged Pakistan-linked operation aimed at Afghanistan’s Finance Ministry shows how a common RAT, paired with ordinary social engineering, can still carry serious intelligence value.
Inside the Shortcut Trap Aimed at Afghanistan's Finance Gatekeepers
A likely SideCopy-linked phishing run paired a Windows .LNK file with a Pashto lure and Xeno RAT, showing how ordinary file types still anchor high-risk intrusion chains.
When a Shortcut Pretends to Be a Notice, the Real Payload Can Hide in Plain Sight
Operation Dragon Whistle shows how a tailored university-themed lure, a disguised Windows shortcut, and Cobalt Strike can be chained into a focused phishing operation against China’s education sector.
Nested by Design: The ZIP Trick Turning a Routine Notice into a Malware Trap
A reported phishing campaign uses an official-looking university notice and macOS-style folder layering to make inspection harder, showing how ordinary archives can be turned into delivery vehicles for malware.
When Student Records Become Fraud Fuel, the Scam Gets Harder to Spot
Targeted fraud against Indian students shows how digital education can expand convenience while also giving impersonators more believable pretexts.
The Silent Weakness in Cyber Defense: When IT Leaders Become the Phishers’ Best Door
The real risk is not just stolen mailboxes; it is how privileged identity, trust, and rushed decisions can turn a single lure into a company-wide problem.
When an Installer Becomes the Bait: APT Lures Turn Trusted Brands into Delivery Traps
A reported phishing operation uses an Adobe Reader lookalike to push EchoGather RAT, showing how software-brand impersonation can make espionage payloads look routine.
Shadow in the Recycle Bin: How Sandworm’s Double-Tunnel Attack Outsmarts Security
Russian hackers’ new tradecraft weaves Tor and SSH into a near-undetectable backdoor for long-term espionage.
‘BlackSanta’ Unwrapped: The Stealthy Kernel Killer Stalking HR Departments
A sophisticated malware campaign weaponizes trust and advanced evasion to harvest credentials and data-right under defenders’ noses.
Inbox Under Siege: Sophisticated Spear Phishing Plagues National Organizations
A new wave of targeted email attacks exploits trust and technology to breach business defenses.
Invisible Ink: How Hackers Weaponized a Popular PDF Tool for Elite Espionage
Cybercriminals are hijacking the trusted PDF24 App to deploy a stealthy backdoor, bypassing modern defenses and targeting high-value victims.