ClickFix is a social engineering attack that tricks users into running malicious commands on their own devices - all under the guise of a routine security check. Disguised as something…
Security researchers here at SlashNext recently uncovered a promotional image on a cybercrime network showcasing a service called “SessionShark O365 2FA/MFA.” SessionShark is a phishing-as-a-service toolkit built to bypass Microsoft…
The Next Evolution in Black-Hat AI A new player has entered the cybercrime AI landscape - Xanthorox AI, a malicious tool that brands itself as the “Killer of WormGPT and…
Phishing attacks have moved beyond simply sending emails with malicious links to incorporate more modern social engineering techniques, including the alarming trend of mixing in smishing (SMS phishing) and vishing…
Phishing attacks continue to evolve, pushing even the most secure authentication methods to their limits. First advertised on cybercrime networks in late January 2025, Astaroth is a brand new phishing…
Employees in most organizations receive countless communications daily—emails, Slack messages, or ticket updates, for example. Hidden among these routine interactions are phishing scams designed to exploit trust and compromise security.…
One morning, you decide to make a purchase from a seemingly reputable online store. The website displays a familiar checkout interface resembling Stripe's payment process. You enter your payment details,…
We recently uncovered GoIssue, a tool marketed on a cybercrime forum that allows attackers to extract email addresses from GitHub profiles and send bulk emails directly to user inboxes. GoIssue…
Our team has been investigating the latest services and infrastructure available to cybercriminals for orchestrating SMS phishing campaigns. After analysing cybercrime forums, it is clear that SMS gateways are currently…
Pandora hVNC is a remote access trojan (RAT) that has been advertised on cybercrime forums since 2021. Surprisingly, it has received little attention from the cybersecurity community. Despite this, it…
.0044) Each" itemprop="image" decoding="async" data-lazy-srcset="https://slashnext.com/wp-content/uploads/2024/01/SMS-Phishing-Threats.png 1354w, https://slashnext.com/wp-content/uploads/2024/01/SMS-Phishing-Threats-300x185.png 300w, https://slashnext.com/wp-content/uploads/2024/01/SMS-Phishing-Threats-1024x631.png 1024w, https://slashnext.com/wp-content/uploads/2024/01/SMS-Phishing-Threats-768x473.png 768w" data-lazy-sizes="(max-width: 1354px) 100vw, 1354px" data-lazy-src="https://slashnext.com/wp-content/uploads/2024/01/SMS-Phishing-Threats.png"/>