phishing
7 live · 32 on record · last incident 1 day ago
Live7
- liveCity of Osaka municipal systems City of Osaka suffers data breach impacting one million residents
Breaches & attacks · Real loss · since 13 Nov 2026
The City of Osaka announced a data breach affecting one million people and warned residents about suspicious phishing emails. Officials are investigating the intrusion and urging vigilance against fraudulent messages.
Do:Warn residents to ignore suspicious emails claiming to be from the local government.
- liveMicrosoft Teams Microsoft Teams meeting booking phishing trap compromises enterprise session
Breaches & attacks · Exploited · since 13 Nov 2026
Attackers used a fake Microsoft Teams meeting scheduler to trick an employee into approving a device code sign-in. The attackers obtained a valid session token before the incident was identified.
- liveGmail AI summary Gmail AI summary misinterprets phishing email as USPTO appointment
Research · since 11 Nov 2026
An AI summarization feature in an email client misparsed a phishing message, presenting it as a legitimate official appointment. The incident highlights vulnerabilities in AI email parsing where untrusted input manipulates summary output.
AI - liveAsyncRAT Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan in Latin America
Breaches & attacks · Exploited · since 10 Nov 2026
The threat actor Blind Eagle launched a phishing campaign using counterfeit court notices to distribute a RAT related to AsyncRAT/DCRat. The campaign targets organizations across Latin America and has successfully delivered the malware.
Do:Implement phishing awareness training and block suspicious email attachments
- liveBank Phishing Sites Deploy Fake Suspended Pages to Evade Takedowns
Breaches & attacks · Exploited · since 5 Nov 2026
Threat actors deployed over 200 phishing sites that display benign suspended pages to returning visitors to avoid detection. The campaign specifically targeted banking customers using evasion techniques.
- liveGoogle Workspace Fake OpenAI and SpaceX events used in multi-platform phishing campaign
Breaches & attacks · Exploited · since 5 Nov 2026
Threat actors are distributing fake webinar and event invitations featuring OpenAI, SpaceX, and Anthropic lures. The campaigns use phishing-as-a-service platforms to harvest Microsoft and Google account credentials and session tokens.
Do:Warn employees to verify event invitations and enforce phishing-resistant MFA.
AI - liveGoogle Calendar Operation CloudFire Phishing Campaign Hijacks Google Sessions
Breaches & attacks · Exploited · since 4 Nov 2026 · updated 12 Nov 2026
A phishing campaign used Google Calendar invites and fake login pages to bypass multi-factor authentication and hijack corporate sessions. Security researchers tracked the attacks and assisted in taking down hundreds of domains used in the campaign.
Earlier25
- closedStolen staff logins are spreading attacks between K-12 school districts
Breaches & attacks · Exploited · since 29 Oct 2026
- closedPhishGen Evaluation of LLM-Driven Phishing Website Generation
Research · since 23 Oct 2026
AI - closedChatGPT Fake Claude and ChatGPT campaigns use ClickFix tactics against developers
Breaches & attacks · Exploited · since 16 Oct 2026
AI - closedFacebook Seth Rudetsky Loses Facebook Page in AI-Assisted Social Engineering Scam
Breaches & attacks · Exploited · since 18 Aug 2026
AI - closedGemini Outsider Enterprise Uses Google Gemini to Generate Phishing Sites
Breaches & attacks · Real loss · since 1 May 2026
AI - closedAI-Enhanced Phishing Campaign Impersonates Australian Government Services
Breaches & attacks · Exploited · since 17 Nov 2025
AI - closedJoann Fabrics fake domains Joann Fabrics Shoppers Defrauded by AI-Generated Scam Sites
Breaches & attacks · Real loss · since 20 Aug 2025
AI - closedAI Overviews AI Chatbots Reportedly Cited Fraudulent Cruise Hotline Enabling Scams
Breaches & attacks · Exploited · since 15 Aug 2025
AI - closedDeepfake ID generator Kimsuky Group Uses AI-Generated Military ID Deepfakes in Phishing
Breaches & attacks · Exploited · since 17 Jul 2025
AI - closedZoom North Korea-Linked Actors Use AI Executive Deepfakes in Zoom Phishing
Breaches & attacks · Exploited · since 22 Jun 2025
AI - closedDeepfake of Sri Lankan President promotes fraudulent investment scheme
Breaches & attacks · Exploited · since 18 Jun 2025
AI - closedAustralian Analyst Targeted by Scam Using AI-Generated Websites
Breaches & attacks · Exploited · since 27 Apr 2025
AI - closedGamma AI Presentation Tool Gamma Abused in Credential Phishing Campaign
Breaches & attacks · Exploited · since 15 Apr 2025
AI - closedLovable Lovable AI Jailbroken to Host Phishing Pages and Credentials Theft
Breaches & attacks · Exploited · since 9 Apr 2025
AI - closedYouTube Deepfake Video of YouTube CEO Neal Mohan Used in Credential Phishing Attacks on Creators
Breaches & attacks · Exploited · since 4 Mar 2025
AI - closedChatGPT FraudGPT-Enabled Phishing Campaign Spoofs ChatGPT Subscription
Breaches & attacks · Exploited · since 23 Feb 2025
AI - closedGoogle Assistant Hack Club Founder Targeted in AI-Driven Voice Phishing Attack
Breaches & attacks · Exploited · since 20 Feb 2025
AI - closedGmail AI-Driven Phishing Campaign Uses Deepfake Robocalls to Target Gmail Users
Breaches & attacks · Exploited · since 17 Feb 2025
AI - closedPhishing Lure Impersonating Maine Town Official Demands Money for Zoning Meeting
Breaches & attacks · Exploited · since 15 Jan 2025
AI - closedInstagram Luis Suárez Deepfake Used in Investment and Phishing Scam
Breaches & attacks · Exploited · since 26 Dec 2024
AI - closedHTML/Nomani Phishing Campaign Deploys AI Deepfakes to Defraud Social Media Users
Breaches & attacks · Exploited · since 16 Dec 2024
AI - closedGenerative AI Used in Real Estate Wire Fraud Scheme
Breaches & attacks · Real loss · since 23 Aug 2024
AI - closedDeepfake video generator Russian-linked network circulates deepfake of Maria Ressa for cryptocurrency scam
Breaches & attacks · Exploited · since 6 Feb 2024
AI - closedGPT-3.5 Underground Market for LLMs Powers Malware and Phishing Scams
Breaches & attacks · Exploited · since 1 Dec 2023
AI - closedGoogle Authenticator Deepfake Voice Exploit Compromises Retool Cloud Services
Breaches & attacks · Real loss · since 27 Aug 2023
AI