AI-Generated Fake Login Pages Heighten Risk of Account Takeovers
Generative AI enables attackers to create more convincing fake login pages that steal passwords and MFA codes, increasing phishing attack sophistication.
Tag
#Account Takeover
4 results in the archive.
EvilTokens PhaaS Disrupted After Compromising 12,000 Microsoft Accounts
The EvilTokens phishing platform compromising over 12,000 Microsoft accounts across 10,000 organizations was disrupted through an operation led by Microsoft's Digital Crimes Unit, halting ongoing account takeovers.
Critical Keycloak Password Reset Flaw Could Let Attackers Hijack Any Account
A critical vulnerability rated 9.1 CVSS in Keycloak allows unauthenticated attackers to hijack user accounts by forcing password resets, with patches released by Red Hat and the Keycloak project.
Zoom warns of critical account takeover vulnerability
Zoom has disclosed a critical vulnerability in its Windows desktop client and SDK that enables unauthenticated attackers to hijack user accounts, posing a significant security risk.