Microsoft

Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale

Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 ...

Italian tennis player Lucrezia Stefanini says she and her family were threatened before a match

Italian tennis player Lucrezia Stefanini says she and her family were threatened when she received a text message featuring a ...
GitHub

Benaah/talksasa-sms-client

A comprehensive JavaScript/TypeScript client for the TalkSASA SMS Gateway API. This package provides an easy-to-use interface for sending SMS, Voice, MMS, and WhatsApp messages, managing templates, ...
Microsoft

Developer-targeting campaign using malicious Next.js repositories

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
GitHub

Tier 1 scraper may prematurely succeed on SPA shell, preventing JavaScript rendering (Playwright) from running

When scraping sites like https://app.yshelper.com/#/pages/rank2/rank2, the site returns a minimal HTML shell with a message like "please enable javascript" if ...