Phish

Ahead of Apple's new iPhone launch, reports are warning buyers to be careful when preordering, as scammers set up fake preorder links and phishing pages to steal payment details and personal information. Shoppers are advised to order only through Apple's official site or authorised retailers, and to be wary of deals that seem too good to be true during the preorder rush.

Cybersecurity analysts are warning about a phishing site hosted on GitHub Pages that mimics a mail account login, disguised as a BEAC invitation tender page. The suspicious link has been shared with a URL analysis scan so others can inspect its infrastructure. Security communities are urging people to avoid entering credentials on such pages, noting that GitHub Pages hosting is commonly abused to make phishing links look legitimate.

Cybersecurity researchers are warning about a phishing site impersonating PayPal, hosted on a Blogspot address designed to mimic a legitimate PayPal login page. The fake domain uses a deliberately misspelled URL to trick users into entering their credentials. The site has been submitted for technical analysis, and security experts are urging people to check web addresses carefully before logging into financial accounts.

A cybersecurity researcher has flagged a suspicious website at the address amazon-arrived.com as likely phishing, warning that the domain mimics Amazon to deceive visitors. An automated analysis of the URL has been published via the URLDNA scanning service. The alert is being shared within the infosec community, where users are cautioning others not to click links or enter credentials on the site.

Hackers linked to Russia's FSB intelligence service have intensified phishing campaigns targeting people and organisations supporting Ukraine, according to reporting by Recorded Future News. The attacks use deceptive emails to steal credentials and sensitive information from Ukraine's international backers. Security watchers say the operation shows Moscow's continued emphasis on espionage against Ukraine's allies rather than purely destructive cyberattacks.

Cybersecurity observers are warning of a phishing site hosted on a Vercel subdomain that imitates Bancolombia's customer portal, using a URL designed to look like the Colombian bank's official 'seguro' security page. The link has been defanged and shared with a public URL analysis scan so people can review its infrastructure. The alert circulates with standard infosec and scam warnings.

Cybersecurity researchers are warning of a possible phishing page hosted on a domain mimicking the Toronto Construction Association, shared via a defanged link and analyzed through the URLDNA scanning service. The alert circulates in infosec communities, urging recipients to avoid the link and verify any communications claiming to come from the association.

Security researchers are warning of a phishing site impersonating Facebook, hosted on the address facebook-eu.blogspot.com. The Blogspot domain is a common tactic to lend fake pages legitimacy. The site was submitted to the URLdna scanning service for analysis, and the warning was shared in cybersecurity circles with tags for phishing, scams and infosec. Users are advised to avoid the link and verify Facebook logins only via the official domain.

Security writers are weighing whether passkeys deliver real privacy gains alongside their well-known security benefits. Passkeys resist phishing and limit damage from data breaches, but questions remain about what websites can still learn about users and how synced passkeys across devices handle personal data. The debate centres on tradeoffs between convenience, security and data exposure.

A new academic review published in a Sage journal examines Internet Addiction Disorder through a neurobiological and behavioral lens, arguing that compulsive internet use may increase cybersecurity risk. The paper reviews how addictive online behavior patterns can leave individuals more exposed to scams, phishing and other digital threats, connecting mental health research with information security concerns.