account hijacking

Telegram bot sells subscriptions to phishing tools to hack Microsoft 365 accounts, including 2FA bypass.

Developers’ accounts are being hijacked using fake job offers sent from a legitimate GitHub address.

A new phishing technique uses progressive web apps (PWAs) to mimic browser windows with convincing web addresses to steal passwords.

Cybercriminals are using genuine Facebook infrastructure to send phishing emails threatening to block accounts.

A credential stuffing attack is one of the most effective ways to take control of accounts. Here’s how it works and what you should do to protect your company.

How to keep cybercriminals out of your Telegram account.

Adult websites are often seen as a security threat, but few know that Trojans could be after their porn site accounts.