Phishing

Scott County School District of Kentucky recovers $3.7 million stolen via a phishing indicent and associated cyber wire fraud transaction.

Wipro email suffers phishing breach. Hackers attack Wipro's technology outsourcing & managed IT services (MSP) customers, reports say.

Microsoft shuts down 100 websites associated with alleged Iranian spearphishing hackers called Phosphorus but also known as APT 35, Charming Kitten & Ajax Security Team.

KnowBe4 funded at $800 million valuation to drive cybersecurity awareness training & simulated phishing software. KKR & Ten Eleven Ventures involved.

Email phishers target anti-money laundering agents at credit unions, a KrebsonSecurity report said.

An open source toolkit dubbed Modlishka (Polish for mantis, a predatory insect) can be configured to launch phishing attacks capable of bypassing two-factor authentication (2FA).

Security awareness training & simulated phishing platform company KnowBe4 launches the PhishER security orchestration, automation & response (SOAR) platform.

A new Microsoft Office 365 phishing attack that uses fake non-delivery notifications to steal users’ cloud application login credentials.