A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

The FBI warns that malicious actors are now sending fraudulent messages pretending to be from “senior U.S. officials,” but ...

Security researchers are warning WhatsApp users about a growing account hijacking technique that does not rely on breaking passwords or bypassing encryption. Attackers exploit WhatsApp’s legitimate ...

Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...

Proofpoint has warned about phishing campaigns abusing legitimate device authorization flow to bypass MFA and gain persistent ...

The Indian government’s CERT-In has issued a warning to citizens about a new WhatsApp scam doing the rounds called GhostPairing.

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

To protect themselves from the ghost attack, TGCSB director Shikha Goel asked people not to share OTP, PIN, CVV, or WhatsApp ...

In an era of AI-enabled deception, authenticity can no longer be assumed, even when the voice on the other end sounds exactly ...

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing ...

Android malware operations evolve with droppers SMS theft and remote access tools spreading fast and risking user data and ...