Credential Theft
The latest Credential Theft coverage — news, analysis, and updates from the WindowsNews.AI desk.
Dadsec and Tycoon2FA: The Growing Danger of Phishing-as-a-Service Platforms
The cybersecurity landscape is witnessing an alarming rise in Phishing-as-a-Service (PhaaS) platforms, with Dadsec and Tycoon2FA emerging as two of the most sophisticated threats. These platforms...
Google Apps Script Phishing Attacks Targeting Microsoft 365: How to Stay Protected
Cybercriminals are increasingly exploiting Google Apps Script to launch sophisticated phishing campaigns against Microsoft 365 users, bypassing traditional security measures with alarming success....
184 Million Passwords Leaked in 2024: Essential Steps to Secure Your Digital Identity
The year 2024 has already seen one of the largest password leaks in history, with over 184 million credentials exposed due to a combination of cloud misconfigurations and sophisticated cyberattacks....
Google Apps Script Phishing Scams Targeting Microsoft Accounts: How to Stay Safe
Cybercriminals are increasingly leveraging Google Apps Script to launch sophisticated phishing campaigns targeting Microsoft account holders. This cross-platform attack vector bypasses traditional...
Google Apps Script Hijacked to Steal Microsoft 365 Credentials in New Phishing Wave
Cybercriminals are increasingly exploiting Google Apps Script to launch sophisticated phishing attacks targeting Microsoft 365 users. This alarming trend demonstrates how attackers abuse legitimate...
CVE-2025-24071: Patch Now to Block Windows File Explorer NTLM Theft
Microsoft's recent disclosure of CVE-2025-24071, a critical Windows File Explorer vulnerability, has sent shockwaves through enterprise IT departments. This zero-day exploit allows attackers to steal...
Microsoft Purchase Emails Weaponized: Hackers Use Real Messages to Deploy Malware in New Phishing Wave
A sophisticated phishing campaign has turned Microsoft's own purchase notifications into an unlikely attack vector, leaving Windows users worldwide exposed to credential theft and malware. Security...
Commvault Azure Breach and CISA Advisory Highlight SaaS Cloud Security Risks
Overview Recent developments have cast a spotlight on the security vulnerabilities inherent in Software as a Service (SaaS) solutions, particularly within cloud environments. A notable incident...
Understanding Lumma Infostealer: The Rising Cyber Threat Against Windows Users
In the current cyber threat landscape, few digital menaces have risen as quickly and explosively as the Lumma information-stealing malware, a sophisticated infostealer that is disrupting hundreds of...
ModiLoader Malware Bypasses Windows Defenses: A Sophisticated Threat Analysis
In the shadowy corners of the digital ecosystem, a new strain of malware named ModiLoader is demonstrating alarming sophistication in bypassing Windows defenses, leveraging decades-old system...
Advanced Phishing Tactics Target Microsoft Platforms: Bypassing MFA and Exploiting Cloud Security
Introduction Phishing attacks have long been a significant threat to enterprise security. Recent developments indicate a concerning evolution in cybercriminal tactics, particularly targeting...
Defending Microsoft Dynamics 365 from Phishing: Multi-Layered Security Strategies
The familiar rhythm of daily business operations increasingly pulses through cloud platforms like Microsoft Dynamics 365 (D365), making them the lifeblood of modern enterprises. Yet, this critical...