Cyber CrimeMicrosoft Cuts Off AI Phishing Platform
Microsoft and partners disrupted EvilTokens, an AI-assisted phishing service that compromised 12,000 accounts, seizing domains and prompting arrests.
> Search
11 results for “account takeover”
Cyber Crime
Cyber CrimeTelus Alerts Users to Account Takeovers
Canadian telecom giant Telus is notifying customers that their accounts were breached and personal data accessed, though the scope remains unclear.
SecurityWeChat worm exploited before calls answered
Tencent patches zero-click flaw that allowed account takeover via VoIP calls.
SecurityKeycloak flaw lets unauthorized password resets
CVE-2026-18963 allows full account takeover via reset flow; patches out.
SecurityChrome's New Defense Against Cookie Theft
Device-bound session credentials could curb account takeovers, but rollout is limited for now.
SecurityDevice Trust Emerges as Key Defense in AI Era
As AI accelerates account takeover attacks, experts argue credentials alone can no longer secure access.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
SecurityBudibase OIDC SSO Flaw Allows Account Takeover
A critical vulnerability in Budibase allows attackers to hijack existing user accounts by exploiting improper email validation in the OIDC login process.
SecurityZoom Account Takeover Threat Revealed
A critical 9.8 severity vulnerability in Zoom's Windows desktop client exposes millions of users to potential account hijacking.
Cyber CrimeForg365 and the Industrialization of Account Takeover Tactics
A Telegram-based phishing service is lowering barriers to entry for M365 attacks by automating complex bypass and exfiltration workflows.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.