Tag: phishing
Cybersecurity Threat Advisory: Trojanized PuTTY installers target IT admins
Threat actors are using malicious Google Search ads to distribute weaponized PuTTY installers that target IT administrators. These ads direct victims to fake websites that mimic legitimate PuTTY download pages. Once installed, the trojanized software deploys malware that enables remote...
Cybersecurity Threat Advisory: Milk Dragon AiTM phishing kit
Security researchers have identified Milk Dragon (also known as NaiLong), a Phishing-as-a-Service (PhaaS) platform being used in large-scale social media fraud campaigns. By impersonating well-known brands and using realistic online shopping experiences, the threat enables attackers to steal payment card...
Cybersecurity Threat Advisory: SynkLoader Teams phishing campaign
Security researchers have identified a phishing campaign that uses Microsoft Teams messages impersonating IT support staff to distribute a newly discovered malware known as SynkLoader. Read this Cybersecurity Threat Advisory to understand the risks associated with SynkLoader, identify potential exposure,...
Cybersecurity Threat Advisory: EvilTokens targets Microsoft 365
Recent research describes a phishing kit called EvilTokens. It is actively targeting organizations in the U.S. and Europe, especially those in finance and other high-value sectors. Barracuda recommends deploying browser-aware phishing analysis and strengthening Microsoft 365 OAuth and device-code controls....
AI is making phishing smarter and MSPs need to keep up
The numbers are jarring: according to Barracuda Networks data, 91 percent of all cyberattacks begin with a phishing email, costing businesses billions of dollars annually. The goal of these attacks hasn’t changed since the mid‑1990s — trick someone into wiring...
Cybersecurity Threat Advisory: Google security page spoofed in PWA attack
A phishing campaign is using a spoofed Google Account security page to distribute a malicious Progressive Web App (PWA). The app is designed to steal one‑time passcodes, collect cryptocurrency wallet addresses, and turn victims’ browsers into proxies for attacker traffic....
MSPs must adapt to stay ahead of AI-driven phishing
Phishing has long been cybercriminals’ weapon of choice — and the numbers remain sobering. In 2024, the FBI recorded 193,407 phishing complaints in the U.S. alone, while Business Email Compromise schemes caused $2.77 billion in losses. And when a breach...
The new face of phishing: Why traditional defenses are failing your customers in 2026
As we navigate the start of 2026, the cybersecurity landscape has reached a critical inflection point. For managed services providers (MSPs), the challenge is no longer just identifying “the bad guys;” it’s identifying the “perfectly simulated guys.” In 2025, phishing...
Email Threat Radar — January 2026
From QR code deception to callback phishing and more: An overview of emerging email threats and attack trends Over the last month, Barracuda threat analysts have investigated the following email threats targeting organizations and their employees: Tycoon phishing kit using QR codes...
Cybersecurity Threat Advisory: DLL sideloading backdoors via LinkedIn messages
A multi‑faceted phishing campaign is using LinkedIn private messages to deliver weaponized payloads that execute through DLL sideloading. The activity involves legitimate‑looking PDFs, a malicious sideloaded DLL, a Python interpreter PE, and decoy archives. Review the recommendations in this Cybersecurity...
