Related Threat Clusters
-
Global Takedown of Kratos Phishing-as-a-Service Infrastructure
On July 20, 2026, German and U.S. authorities dismantled the Kratos phishing-as-a-service (PhaaS) platform, arresting its developer in Indonesia. The operation neutralized over 200 servers and disrupted approximately…
17 articles · Updated July 21, 2026 -
FBI Warns of Kali365 Phishing Kit Targeting Microsoft 365 Users
The FBI has issued a warning regarding the Kali365 phishing kit, which is actively stealing Microsoft OAuth tokens and bypassing multi-factor authentication (MFA) protocols. First identified in April 2026, Kali365 is…
135 articles · Updated May 22, 2026 -
Scammers Exploit Microsoft Email System for Phishing Attacks
Cybercriminals have discovered a method to exploit Microsoft's internal email system, specifically the [email protected] address, to send phishing emails that appear legitimate. This vulnerability…
8 articles · Updated May 21, 2026 -
ShinyHunters Target SSO Accounts in Voice Phishing Attacks
The ShinyHunters extortion gang has claimed responsibility for a series of voice phishing attacks targeting single sign-on (SSO) accounts at major platforms including Okta, Microsoft, and Google. In these attacks,…
191 articles · Updated January 25, 2026 -
Emergence of Agentic AI Raises Governance and Security Challenges
In 2026, the rise of agentic AI is transforming how businesses operate, particularly in the financial services sector. This new technology allows for autonomous decision-making, which increases the potential impact of…
4448 articles · Updated February 10, 2026 -
ShinyHunters Group Targets 100+ Enterprises Including Canva and Epic Games
The ShinyHunters group is conducting a large-scale identity-theft operation targeting over 100 high-value organizations, including Canva, Atlassian, and Epic Games. This campaign employs a combination of tactics from…
2 articles · Updated January 27, 2026 -
Rise in AI-Driven Phishing Attacks Using Legitimate Platforms
Cyber attackers are increasingly leveraging AI to conduct more sophisticated phishing attacks. The latest Phishing Threat Trends Report from KnowBe4 indicates a 14% increase in attack volumes over the past year, with…
1 article · Updated December 10, 2025 -
ShinyHunters Targets Canva and 99 Other Organizations in Credential Theft Campaign
ShinyHunters has launched a credential stealing campaign targeting around 100 organizations using Okta's single sign-on (SSO) service. The operation has been confirmed by both researchers and the criminal group, with…
2 articles · Updated January 26, 2026 -
ShinyHunters Phishing Campaign Targets Over 100 Organizations
A phishing campaign attributed to ShinyHunters has targeted over 100 organizations, utilizing vishing and advanced phishing kits to bypass multi-factor authentication on platforms like Okta and other SSO services. The…
2 articles · Updated January 28, 2026
Recent Intelligence Reports
- Kratos phishing-as-a — Theregister · July 21, 2026
- Kratos PhaaS Targets Microsoft 365 Users With SharePoint Links and Cloudflare Anti — Gbhackers · July 16, 2026
- System Notification Abuse Microsoft Phishing — abnormal.ai · May 21, 2026
- Living off the agent: The new tactic hijacking enterprise AI — Thenewstack · May 12, 2026
- ShinyHunters swipes right on 10M records in alleged dating app data grab — Theregister · January 29, 2026
- ShinyHunters swipes right on 10M records in alleged dating app data grab — Theregister · January 29, 2026
- Canva, Atlassian, Epic Games Among the 100+ Enterprises Targeted by ShinyHunters Group — Cybersecuritynews · January 27, 2026
- Over 100 Organizations Targeted in ShinyHunters Phishing Campaign — Feeds.Feedburner · January 27, 2026