🚨 Poisoned phishing: attackers downgrade FIDO2 MFA to bypass protections. Even strong auth needs stronger vigilance. 🧑💼🎯
#MFABypass #PhishingTactics
A PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in WebAuthn to trick users into approving login authentication requests from fake company portals.
🤖 Chatbots like ChatGPT are unintentionally aiding phishers by suggesting fake or unregistered URLs for major brands 🌐. Criminals are exploiting these AI slip-ups to set traps.
#SecureAI #PhishingTactics ⚠️🔗
https://go.theregister.com/feed/www.theregister.com/2025/07/03/ai_phishing_websites/
This is an interesting phishing tactic: using a website translation service.
Sadly the actual phishing website is dead/angry-at-Americans so I can not see what the real phishing page looks like.
On an unrelated topic, the translation website has unblocked malicious ads served by Google Ads. Good for them.
Manuel Bissey
iam-py-test