Phish

Chinese hackers impersonated a former US official to trick AI experts into handing over their emails, according to a Reuters report. The phishing operation highlights growing espionage efforts focused on artificial intelligence researchers and the sensitive information they hold.

Cleveland.com's daily celebrities birthdays feature for September 30, 2026 highlights Phish guitarist Trey Anastasio and Italian actress Monica Bellucci among the famous names celebrating. Such lists are a recurring fixture of entertainment coverage, offering readers a quick roundup of stars marking the day, along with brief notes on their careers and milestones.

Truecaller has launched a new tool called Scam Checker, designed to help users detect fraud attempts. The feature lets users check links, phone numbers and suspicious messages for signs of scams such as phishing. The tool is being discussed in connection with both iOS and Android versions of the app.

A warning is circulating telling people not to open links claiming to lead to an early pre-order page for a device referred to as the iPhone Duo. The advice suggests such pages are not legitimate and could be used to phish personal or payment details. Consumers are urged to pre-order only through Apple's official site or verified retailers.

Cybersecurity watchers are warning about a suspected phishing website hosted on a Weebly subdomain, sharing a defanged link and pointing to a public URL analysis scan that breaks down the page's infrastructure. The alert is being circulated in infosec communities as an example of scammers abusing free website builders to host fraudulent pages.

The U.S. Department of War is marking Cybersecurity Awareness Month by promoting the message 'Brilliant at the Basics', urging personnel and the public to stick to fundamental practices like strong passwords, multi-factor authentication and phishing vigilance. The campaign frames simple habits as the most effective defense against growing cyber threats to government systems and everyday users.

Cybersecurity researchers are flagging a phishing site impersonating the webmail service of the Académie de Dijon, the French education authority. The fake page is hosted on a Weebly subdomain, a common tactic to lend false credibility to credential-stealing links. A technical analysis has been published on URLdna. Users in the Dijon education region are advised to avoid the link and verify any email requests through official channels.

Cybersecurity observers are warning about a suspected phishing site hosted on a GitHub Pages address, flagged as an attempt to trick users into handing over credentials or sensitive data. The alert includes a link to a URL analysis so others can inspect the page's behaviour. The warnings, shared in infosec circles, underline how attackers continue to abuse legitimate free hosting services to distribute scams.

A cybersecurity analyst has raised an alert over a suspected phishing page hosted on a Blogspot address with a deliberately distorted spelling designed to imitate a legitimate site. The suspicious link was shared with its characters broken up so it cannot be clicked accidentally, and a technical breakdown of the domain was published via a URL analysis service. The post circulated with phishing and scam hashtags among infosec followers.

A security practitioner who ran company-wide and customer-facing cyber awareness programmes has described how the work was organised, with the first weeks of each month devoted to specific training sessions and the latter part of the month used for simulated phishing campaigns. The account offers a practical look at how organisations try to prepare staff to recognise phishing attempts before real attacks succeed.

Security researchers are warning about a phishing site at the address facebooc-system.start.page, which imitates Facebook to steal login credentials. The deliberately misspelled domain on a free hosting service is a common scam pattern. An analysis of the site has been published on the URLDNA scanning platform, and the warning is circulating among infosec professionals.

Cybersecurity researchers are flagging a possible phishing campaign hosted through a Google Docs presentation link. The URL, shared in defanged form, points to a public Google Slides page that may be used to lure victims into handing over credentials or personal data. A full technical analysis of the link has been published on a URL scanning service. Users are advised to treat unexpected Google Docs links with caution.

Cybersecurity watchers are warning about a suspected phishing site hosted on a firebaseapp.com subdomain, flagged under the name 'proposal-soumission'. The address was defanged to prevent accidental clicks, and a scan link on urldna.io was shared so others can inspect the domain's characteristics. The French word 'soumission' (quote or bid) hints the site may impersonate a document or tender service to trick users into entering credentials.

Symantec reports a sharp rise in phishing attacks using SVG image files in August 2026. Attackers embed fake login pages and malware inside SVG files smuggled through email attachments, bypassing conventional detection because the files look like harmless images. Symantec has published guidance on how the technique works and what defences organisations should deploy against it.

Cybersecurity observers are warning about the domain tga.dev, calling it a possible phishing site. The alert includes a link to a forensic scan of the address on the URLDNA analysis platform, shared under phishing and scam tags on an information security forum. Details about who is behind the domain or how many users may be affected have not been published.

A new Eurobarometer survey has found that three in four employees across the European Union have encountered cyber threats in their workplace, such as phishing attempts or other online attacks. The findings underline how widespread cyber risks have become for ordinary workers, not just IT specialists, and are likely to feed into ongoing EU debates on cybersecurity rules and digital resilience.

Cybersecurity researchers are warning about a suspected phishing operation at a fraudulent Firebase-hosted web address. The site's link has been defanged to prevent accidental clicks, and a detailed technical analysis has been published on urlDNA so other defenders can inspect the domain's behaviour and indicators. The warning is circulating among information security professionals tracking active scam infrastructure.

A cybersecurity blog has published a detailed breakdown of a modern phishing campaign abusing Microsoft OneDrive, walking through how attackers craft convincing file-sharing lures and what investigators can do to trace them. The write-up is aimed at digital forensics and OSINT practitioners, touching on the psychology behind cybercrime and the growing role of AI tools in both attacks and investigations.

A new Eurobarometer survey has found that roughly three in four employees across the European Union have encountered cyber threats such as phishing, malware or scams while at work. The findings underline how widespread workplace cyberattacks have become and are likely to feed into ongoing EU debates about cybersecurity rules, digital resilience and the need for better training and protection for workers and businesses.

Cybersecurity observers are warning about a possible phishing page hosted on a randomly named Weebly subdomain. The suspicious link has been defanged to prevent accidental clicks, and a technical analysis of the URL has been published on the scanning service URLDNA so others can inspect indicators such as hosting details and page content. The warning is being shared in infosec circles as a routine scam alert.

Cybersecurity researchers are warning of a possible phishing page hosted on a domain mimicking the Toronto Construction Association, shared via a defanged link and analyzed through the URLDNA scanning service. The alert circulates in infosec communities, urging recipients to avoid the link and verify any communications claiming to come from the association.

Cybersecurity researchers are warning about a suspected phishing website hosted on a fake Venture billing pager update page. The site was shared with a defanged link so others would not accidentally click it, and a technical analysis of the address has been published on the URL DNA scanning service. Security professionals are urged to block the domain and watch for related credential-harvesting campaigns.

Cybersecurity observers are circulating a warning about a fraudulent domain impersonating Google, identified at google29.m4ntapaset.ink. The suspicious link is being shared in defused form so others can avoid clicking it, and a public analysis of the site has been published on the URLdna scanning service. The alert is tagged under cybersecurity, phishing and scam topics as experts urge caution with unfamiliar links.

Cybersecurity observers are warning about a suspected phishing page hosted at a Weebly web address, sharing a link to a detailed technical analysis of the site on the URLDNA scanning platform. The address has been defanged to prevent accidental clicks. The warning is being circulated in information security communities alongside standard scam and phishing alert tags.

Cybersecurity researchers are warning about a phishing site impersonating PayPal, hosted on a Blogspot address designed to mimic a legitimate PayPal login page. The fake domain uses a deliberately misspelled URL to trick users into entering their credentials. The site has been submitted for technical analysis, and security experts are urging people to check web addresses carefully before logging into financial accounts.

Cybersecurity observers are warning of a phishing site hosted on a Vercel subdomain that imitates Bancolombia's customer portal, using a URL designed to look like the Colombian bank's official 'seguro' security page. The link has been defanged and shared with a public URL analysis scan so people can review its infrastructure. The alert circulates with standard infosec and scam warnings.

Security researchers are warning of a suspected phishing domain, donasdonegociosicredi.com.br, which mimics Sicredi, a Brazilian credit union. The domain was defanged and submitted for scanning on URLDNA, where its analysis is publicly available. Analysts urge caution with links claiming to be from Sicredi, as the .com.br domain could be used to steal banking credentials from Brazilian customers.