Back Cybersecuritynews

Hackers Exploit Legitimate Apple and PayPal Invoice Emails in DKIM Replay Attacks

Cybersecuritynews •Tushar Subhra Dutta • February 9, 2026

Cybersecurity threats are swiftly evolving beyond easily spotted, poorly written phishing emails to sophisticated methods that leverage trusted digital infrastructure. Attackers are now exploiting legitimate business workflows within widely used platforms, effectively turning reputable services into unwitting accomplices for financial fraud. This strategic shift makes malicious communications significantly harder for traditional security filters to detect, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DKIM Replay Attacks Target Apple and PayPal Invoice Emails Cybercriminals are exploiting legitimate invoice emails from Apple and PayPal in DKIM replay attack campaigns. This method leverages trusted digital infrastructure to facilitate financial fraud, making detection by traditional security measures more challenging. The attacks manipulate everyday business workflows, turning reputable services into tools for malicious activities. 4 sources 31

Extracted Entities

Hackers Exploit Legitimate Apple and PayPal Invoice Emails in DKIM Replay Attacks

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)