A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

The FBI warns that malicious actors are now sending fraudulent messages pretending to be from “senior U.S. officials,” but ...

Security researchers are warning WhatsApp users about a growing account hijacking technique that does not rely on breaking passwords or bypassing encryption. Attackers exploit WhatsApp’s legitimate ...

Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...

Proofpoint has warned about phishing campaigns abusing legitimate device authorization flow to bypass MFA and gain persistent ...

The Indian government’s CERT-In has issued a warning to citizens about a new WhatsApp scam doing the rounds called GhostPairing.

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign ...

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

America’s cyber defense agency now warns Google, Microsoft and Apple users to secure their accounts — change passwords, remove SMS two-factor authentication and add passkeys. But hackers are quickly ...

Mohammedia – Two-factor authentication has long been sold as a strong safety net for online accounts. The idea is simple: even if someone steals your password, they still can’t log in without a second ...

As you prepare to spend time with loved ones, FBI Atlanta says it can be a good time to talk about scams. Here's how ...