The FakeGit campaign exploits counterfeit GitHub repositories with copied projects and deceptively authentic developer profiles to distribute SmartLoader malware through fake AI tools and MCP servers.
A compromised malware delivery server exposed an AI-assisted phishing infrastructure actively deployed against end users, providing insights into operationalization processes and automation techniques.
HollowGraph uses Microsoft Graph API via the calendar feature for command-and-control communication and data exfiltration within legitimate Microsoft 365 accounts.
German and US authorities have shut down the phishing service Kratos, which enabled over 1,800 criminal users to conduct approximately 15,000 campaigns per month, and arrested its operator in Indonesia.
