Back Gbhackers

Hackers Abuse Apple & PayPal Invoice Emails in DKIM Replay Attack Campaign

Gbhackers •Mayura Kathir • February 9, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DKIM Replay Attacks Target Apple and PayPal Invoice Emails Cybercriminals are exploiting legitimate invoice emails from Apple and PayPal in DKIM replay attack campaigns. This method leverages trusted digital infrastructure to facilitate financial fraud, making detection by traditional security measures more challenging. The attacks manipulate everyday business workflows, turning reputable services into tools for malicious activities. 4 sources 31

Extracted Entities

Hackers Abuse Apple & PayPal Invoice Emails in DKIM Replay Attack Campaign

The full story

Extracted Entities

Attack Types (2)

Campaigns (1)

Companies (2)

MITRE ATT&CK (1)