The Wazza phishkit has emerged as a sophisticated threat, targeting banking, manufacturing, and government organizations across the United States, Europe, and Australia. This new phishkit moves beyond traditional phishing tactics, which primarily involved replicating login pages to capture user credentials.
Reports mentioning ANY.RUN
ANY.RUN researchers have detailed a sophisticated CSuite phishing campaign specifically targeting United States-based executives, as revealed through an analysis of 351 sandbox submissions. This campaign demonstrates a dual-pronged attack strategy that combines the theft of Microsoft 365 session cookies…
A significant Remote Monitoring and Management (RMM) phishing campaign, initially believed to be focused on Canada due to its use of Canada Revenue Agency (CRA) tax forms as lures, has been revealed to be a much larger operation impacting 46…
The Mirage2FA campaign, a sophisticated phishing-as-a-service toolkit, has impacted an estimated 4,500 companies across the United States and European Union between 2024 and 2026. This campaign specifically targets Microsoft 365 accounts by leveraging legitimate login flows to circumvent two-factor authentication…
More than 20 Brazilian government websites were hijacked and repurposed as channels for malware delivery as part of an ongoing PhantomEnigma campaign. This discovery was made by ANY.RUN, a company specializing in interactive malware analysis and threat intelligence.