#cloudflare-spoofing

[ follow ]
#wordpress #javascript-injection #traffic-distribution-system-tds #apt29 #watering-hole #microsoft-accounts
Information security
fromThe Hacker News
1 week ago

Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks

Attackers inject malicious JavaScript into WordPress theme files to load external scripts that redirect visitors via a traffic-distribution system while mimicking Cloudflare assets.
Information security
fromTheregister
1 month ago

AWS nails Russia's Cozy Bear trying to nick Microsoft creds

APT29 used watering-hole attacks and Cloudflare-mimicking domains to trick Microsoft users into authorizing attacker-controlled devices and gaining access to accounts and data.
[ Load more ]