Phish

Cybersecurity firm Group-IB has identified RemControl, a new Android banking trojan distributed through fake TVTap streaming apps. The malware uses AI-generated phishing overlays to trick users into entering banking PINs and credentials, which are then stolen. Security researchers are warning Android users to avoid unofficial app sources as the trojan spreads.

Truecaller has launched a new tool called Scam Checker, designed to help users detect fraud attempts. The feature lets users check links, phone numbers and suspicious messages for signs of scams such as phishing. The tool is being discussed in connection with both iOS and Android versions of the app.

Filippo Bernardini, the Italian man who posed as editors and agents to steal unpublished manuscripts from authors across the book world for years, is the subject of renewed attention over whether he is operating again. The New York Times revisits the scheme, which ensnared writers including Margaret Atwood, and asks whether the scammer, who faced US fraud charges, has resumed his activities.

Cybersecurity researchers are flagging a possible phishing campaign hosted through a Google Docs presentation link. The URL, shared in defanged form, points to a public Google Slides page that may be used to lure victims into handing over credentials or personal data. A full technical analysis of the link has been published on a URL scanning service. Users are advised to treat unexpected Google Docs links with caution.

Security researchers are warning about a phishing site at the address facebooc-system.start.page, which imitates Facebook to steal login credentials. The deliberately misspelled domain on a free hosting service is a common scam pattern. An analysis of the site has been published on the URLDNA scanning platform, and the warning is circulating among infosec professionals.

Symantec reports a sharp rise in phishing attacks using SVG image files in August 2026. Attackers embed fake login pages and malware inside SVG files smuggled through email attachments, bypassing conventional detection because the files look like harmless images. Symantec has published guidance on how the technique works and what defences organisations should deploy against it.

A cybersecurity blog has published a detailed breakdown of a modern phishing campaign abusing Microsoft OneDrive, walking through how attackers craft convincing file-sharing lures and what investigators can do to trace them. The write-up is aimed at digital forensics and OSINT practitioners, touching on the psychology behind cybercrime and the growing role of AI tools in both attacks and investigations.

Cybersecurity researchers are warning of a possible phishing page hosted on a domain mimicking the Toronto Construction Association, shared via a defanged link and analyzed through the URLDNA scanning service. The alert circulates in infosec communities, urging recipients to avoid the link and verify any communications claiming to come from the association.

Cybersecurity observers are warning about a suspected phishing page hosted at a Weebly web address, sharing a link to a detailed technical analysis of the site on the URLDNA scanning platform. The address has been defanged to prevent accidental clicks. The warning is being circulated in information security communities alongside standard scam and phishing alert tags.

Security researchers are warning about a suspected phishing site hosted on a Weebly subdomain that offers FIFA 18 in-game coins, a common lure used to steal credentials or payment details from players. A technical analysis of the page has been published via a URL scanning service, defanging the link so others can inspect it safely. Users are urged to avoid entering account or card information on sites promising cheap game currency.

Cybersecurity researchers are warning about a possible phishing site operating through a Weebly-hosted page that impersonates network or helpdesk services. The suspicious link has been defused and shared with a technical analysis via urldna.io so that other security professionals can inspect the domain and its infrastructure. The report has circulated in infosec communities, which frequently post such alerts to warn the public about scam pages before they spread more widely.

Cleveland.com has published its daily celebrity birthdays roundup for September 30, 2026, listing actress Monica Bellucci and Phish guitarist Trey Anastasio among the famous faces celebrating. The recurring feature highlights well-known figures born on the date each day. Little reaction beyond the listing itself, and exact ages and other names on the list were not detailed in the available information.

Security researchers are flagging a fraudulent Wells Fargo login page hosted on a Google Sites address, designed to steal customers' banking credentials. The link has been defanged to prevent accidental clicks, and a public scan on URLDNA lets others inspect the site's characteristics. The warning has circulated among infosec community members tracking phishing campaigns.

Cybersecurity observers are warning about a suspected phishing page hosted at general-trading.weebly.com, sharing the address in defanged form so others do not accidentally visit it. A technical scan of the URL has been published on urldna.io for analysts to review. The alerts are circulating in infosec communities with tags for phishing, scams and general cybersecurity awareness.

The Russia-aligned hacking group Star Blizzard is broadening its targeting beyond its usual victims and changing its tactics, extending operations from Ukraine to a wider range of countries. The group, previously linked to spear-phishing campaigns against researchers, journalists and government figures, is being monitored by cybersecurity analysts tracking its evolving methods and expanding reach.

Cybersecurity researchers are warning about a suspected phishing site at the domain amazoninvit.com, which impersonates Amazon, likely luring victims through fake invitation or delivery messages. The domain has been submitted for technical analysis on the URLdna scanning platform, and the warning is circulating in information security communities with phishing and scam alerts.

Cybersecurity analysts are warning about a possible phishing campaign distributed through a shortened TinyURL link. A link-analysis service has published a scan of the address so that users can inspect where the redirect leads before clicking. Alerts like this circulate in information-security communities to warn people off suspicious links and demonstrate how shortened URLs can hide malicious destinations.

Security writers are weighing whether passkeys deliver real privacy gains alongside their well-known security benefits. Passkeys resist phishing and limit damage from data breaches, but questions remain about what websites can still learn about users and how synced passkeys across devices handle personal data. The debate centres on tradeoffs between convenience, security and data exposure.

Cybersecurity researchers are warning about a phishing page hosted on Google Sites, sharing a defanged link and a scan report on urlDNA for analysis. The alerts circulated in infosec channels, with warnings that the site is designed to deceive visitors into handing over credentials or personal data. The use of a legitimate Google domain highlights how attackers exploit trusted hosting services.

Cybersecurity observers are warning about a possible phishing website at 21argarena4.com. The domain, which imitates the Arena of Valor ARG Arena branding, has been defanged in warnings and submitted to the URLdna scanning service for analysis. The alert is being shared within infosec communities alongside tags for phishing, scams and general cybersecurity awareness.

Cybersecurity observers are warning about a suspected phishing site impersonating Facebook, hosted at a lookalike Blogspot address. The domain 'facebok-facebook.blogspot.com' uses a misspelling of the platform's name to trick users. A scan of the URL has been published on URLDNA so others can review the technical details. The warning is circulating among infosec communities, with users urged to treat the link as a scam and avoid entering any credentials.

Ukraine's Supreme Court has ruled that a bank is not obliged to return money stolen from a client's card if the client voluntarily gave access to her account. A woman lost almost 43,700 hryvnias after following a phishing link promising 6,500 hryvnias in aid and entering her login details, which gave fraudsters access to her account. The decision signals that responsibility can fall on customers who hand over credentials themselves.