Threat Intelligence4 October 2026
TA419 Phishes US AI Policy Experts With Microsoft AitM Pages
Proofpoint attributes a series of credential-phishing campaigns against AI policy experts to TA419, a China-aligned espionage group. The lures impersonate trusted peers and use a browser-in-the-browser kit that proxies real Microsoft sign-ins.
ta419phishingadversary-in-the-middle
3 min readRead
Phishing & Fraud26 July 2026
Insurance Phishing Goes Real-Time: Inside the InsureOTP Kit
CTM360 has uncovered a phishing framework that no longer waits to cash in stolen logins — it hijacks insurance accounts live, relaying intercepted OTPs before they expire.
phishingaccount-takeoverotp-interception
4 min readRead
Social Engineering & Identity23 July 2026
Why a Single 2FA Code Can Unlock Your Whole Digital Life
A first-person identity theft account covered by Bruce Schneier shows how one leaked 2FA code handed a scammer control of a victim's email — and from there, everything else.
phishingmfaaccount-takeover
4 min readRead