Phish

Cybersecurity firm Group-IB has identified RemControl, a new Android banking trojan distributed through fake TVTap streaming apps. The malware uses AI-generated phishing overlays to trick users into entering banking PINs and credentials, which are then stolen. Security researchers are warning Android users to avoid unofficial app sources as the trojan spreads.

Truecaller has launched a new tool called Scam Checker, designed to help users detect fraud attempts. The feature lets users check links, phone numbers and suspicious messages for signs of scams such as phishing. The tool is being discussed in connection with both iOS and Android versions of the app.

Chinese-linked hackers posed as a former US official in a phishing scheme aimed at stealing emails from artificial intelligence specialists, Reuters reports. The operation used a spoofed identity to trick targets into handing over sensitive correspondence, highlighting growing concern over espionage campaigns targeting the AI sector and US expertise in the field.

Filippo Bernardini, the Italian man who posed as editors and agents to steal unpublished manuscripts from authors across the book world for years, is the subject of renewed attention over whether he is operating again. The New York Times revisits the scheme, which ensnared writers including Margaret Atwood, and asks whether the scammer, who faced US fraud charges, has resumed his activities.

Cleveland.com's daily celebrities birthdays feature for September 30, 2026 highlights Phish guitarist Trey Anastasio and Italian actress Monica Bellucci among the famous names celebrating. Such lists are a recurring fixture of entertainment coverage, offering readers a quick roundup of stars marking the day, along with brief notes on their careers and milestones.

Cybersecurity researchers are flagging a possible phishing campaign hosted through a Google Docs presentation link. The URL, shared in defanged form, points to a public Google Slides page that may be used to lure victims into handing over credentials or personal data. A full technical analysis of the link has been published on a URL scanning service. Users are advised to treat unexpected Google Docs links with caution.

Security researchers are warning about a phishing site at the address facebooc-system.start.page, which imitates Facebook to steal login credentials. The deliberately misspelled domain on a free hosting service is a common scam pattern. An analysis of the site has been published on the URLDNA scanning platform, and the warning is circulating among infosec professionals.

The U.S. Department of War is promoting the theme 'Brilliant at the Basics' for Cybersecurity Awareness Month, urging staff and the wider defense community to master fundamental cyber hygiene such as strong passwords, phishing awareness and software updates. The campaign highlights that basic practices remain the most effective defense against increasingly common cyber threats targeting government systems.

Symantec reports a sharp rise in phishing attacks using SVG image files in August 2026. Attackers embed fake login pages and malware inside SVG files smuggled through email attachments, bypassing conventional detection because the files look like harmless images. Symantec has published guidance on how the technique works and what defences organisations should deploy against it.

A cybersecurity blog has published a detailed breakdown of a modern phishing campaign abusing Microsoft OneDrive, walking through how attackers craft convincing file-sharing lures and what investigators can do to trace them. The write-up is aimed at digital forensics and OSINT practitioners, touching on the psychology behind cybercrime and the growing role of AI tools in both attacks and investigations.

A warning is circulating telling people not to open links claiming to lead to an early pre-order page for a device referred to as the iPhone Duo. The advice suggests such pages are not legitimate and could be used to phish personal or payment details. Consumers are urged to pre-order only through Apple's official site or verified retailers.

Cybersecurity observers are warning about a suspected phishing page hosted at a Weebly web address, sharing a link to a detailed technical analysis of the site on the URLDNA scanning platform. The address has been defanged to prevent accidental clicks. The warning is being circulated in information security communities alongside standard scam and phishing alert tags.

Two-thirds of schools in England now report recovering immediately from cyber incidents, suggesting improved resilience to attacks such as ransomware and phishing. Despite the progress, teachers remain divided over who bears responsibility for security and whose job security is at risk when breaches occur, with staff often left handling technical problems outside their expertise.

Cybersecurity researchers are warning of a possible phishing page hosted on a domain mimicking the Toronto Construction Association, shared via a defanged link and analyzed through the URLDNA scanning service. The alert circulates in infosec communities, urging recipients to avoid the link and verify any communications claiming to come from the association.

Cybersecurity observers are warning about a suspected phishing site hosted on a GitHub Pages address, flagged as an attempt to trick users into handing over credentials or sensitive data. The alert includes a link to a URL analysis so others can inspect the page's behaviour. The warnings, shared in infosec circles, underline how attackers continue to abuse legitimate free hosting services to distribute scams.

Security researchers are warning about a suspected phishing site hosted on a Weebly subdomain that offers FIFA 18 in-game coins, a common lure used to steal credentials or payment details from players. A technical analysis of the page has been published via a URL scanning service, defanging the link so others can inspect it safely. Users are urged to avoid entering account or card information on sites promising cheap game currency.

Cybersecurity researchers are warning about a possible phishing site operating through a Weebly-hosted page that impersonates network or helpdesk services. The suspicious link has been defused and shared with a technical analysis via urldna.io so that other security professionals can inspect the domain and its infrastructure. The report has circulated in infosec communities, which frequently post such alerts to warn the public about scam pages before they spread more widely.

A cybersecurity analyst has raised an alert over a suspected phishing page hosted on a Blogspot address with a deliberately distorted spelling designed to imitate a legitimate site. The suspicious link was shared with its characters broken up so it cannot be clicked accidentally, and a technical breakdown of the domain was published via a URL analysis service. The post circulated with phishing and scam hashtags among infosec followers.

Cybersecurity observers are warning of a phishing site hosted on a Vercel subdomain that imitates Bancolombia's customer portal, using a URL designed to look like the Colombian bank's official 'seguro' security page. The link has been defanged and shared with a public URL analysis scan so people can review its infrastructure. The alert circulates with standard infosec and scam warnings.

Cybersecurity guidance circulating online urges internet users to be skeptical of unsolicited messages and offers in order to avoid falling victim to online scams. The reminder points readers to basic security advice on recognizing fraud attempts, a perennial concern as phishing and social engineering scams continue to target people through email, social media and messaging platforms.

Cybersecurity watchers are warning about a suspected phishing website hosted on a Weebly subdomain, sharing a defanged link and pointing to a public URL analysis scan that breaks down the page's infrastructure. The alert is being circulated in infosec communities as an example of scammers abusing free website builders to host fraudulent pages.

A security practitioner who ran company-wide and customer-facing cyber awareness programmes has described how the work was organised, with the first weeks of each month devoted to specific training sessions and the latter part of the month used for simulated phishing campaigns. The account offers a practical look at how organisations try to prepare staff to recognise phishing attempts before real attacks succeed.

Security researchers are flagging a fraudulent Wells Fargo login page hosted on a Google Sites address, designed to steal customers' banking credentials. The link has been defanged to prevent accidental clicks, and a public scan on URLDNA lets others inspect the site's characteristics. The warning has circulated among infosec community members tracking phishing campaigns.

Cybersecurity researchers are warning about a suspected phishing site at the domain amazoninvit.com, which impersonates Amazon, likely luring victims through fake invitation or delivery messages. The domain has been submitted for technical analysis on the URLdna scanning platform, and the warning is circulating in information security communities with phishing and scam alerts.