Chinese PhaaS Ecosystem Evolves, Threatens Global Financial Security

The game has changed in the world of phishing: attackers are now using Phishing as a Service (PhaaS) to intercept one-time passcodes and tokenize payment cards, giving them direct control over victims' financial accounts. This sinister shift threatens global financial security, allowing attackers to tap into accounts…

https://osintsights.com/chinese-phaas-ecosystem-evolves-threatens-global-financial-security?utm_source=mastodon&utm_medium=social

#PhishingAsAService #Phaas #FinancialSecurity #GoogleThreatIntelligenceGroup #Gtig

Chinese PhaaS Ecosystem Evolves, Threatens Global Financial Security

Learn how Chinese PhaaS providers evolve to threaten global finance with real-time interception and tokenization, and take action to secure your financial security now.

OSINTSights

#GTIG AI Threat Tracker: Adversaries Leverage AI for #Vulnerability #Exploitation, Augmented Operations, and Initial Access

https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access

Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access | Google Cloud Blog

Explore GTIG's 2026 report on how adversaries leverage AI for zero-day exploits, autonomous malware, and industrial-scale cyber operations.

Google Cloud Blog
Google Thwarts First AI-Assisted Zero-Day Cyberattack Attempt

GTIG has revealed what it describes as the first confirmed case of hackers using AI for a potential large-scale cyberattack.

Lowyat Media Group

US Top News and Analysis | Google says it likely thwarted effort by hacker group to use AI for 'mass exploitation event'

AI generated summary, Read the full article for complete information.

Google’s Threat Intelligence Group announced it had likely stopped a “mass vulnerability exploitation” operation in which hackers employed artificial‑intelligence tools such as OpenClaw to locate and weaponise zero‑day software flaws, even devising a method to bypass two‑factor authentication. The group said it has “high confidence” it recorded the AI‑driven attack and intervened before it could be used, though it does not believe Google’s own Gemini model was involved. The report highlights a growing trend of cyber‑criminals—particularly groups linked to China and North Korea—leveraging readily available AI models to discover exploits, a concern echoed by Anthropic’s delayed rollout of its Mythos model and OpenAI’s limited preview of GPT‑5.5‑Cyber for vetted security teams.

Read more: https://www.cnbc.com/2026/05/11/google-thwarts-effort-hacker-group-use-ai-mass-exploitation-event.html

#Google #GTIG #China #NorthKorea

Google Exposes AI-Generated Zero-Day Exploit Used by Hackers

Google's Threat Intelligence Group has made a groundbreaking discovery - a zero-day exploit, potentially crafted with AI, was used by hackers to bypass two-factor authentication in a widely-used open-source tool. This alarming finding highlights the emerging threat of AI-generated cyber attacks.

https://osintsights.com/google-exposes-ai-generated-zero-day-exploit-used-by-hackers?utm_source=mastodon&utm_medium=social

#AigeneratedExploit #ZeroDay #GoogleThreatIntelligenceGroup #Gtig #Llm

Google Exposes AI-Generated Zero-Day Exploit Used by Hackers

Discover how Google exposed an AI-generated zero-day exploit used by hackers and learn more about the threat - read the full report now.

OSINTSights

Google Exposes Microsoft Teams Phishing Campaign Using Custom Snow Malware

Beware of scammers posing as helpdesk heroes! They'll flood your inbox with spam, then reach out on Microsoft Teams with a fake fix that actually steals your password using custom Snow malware.

https://osintsights.com/google-exposes-microsoft-teams-phishing-campaign-using-custom-snow-malware?utm_source=mastodon&utm_medium=social

#MicrosoftTeamsPhishing #CustomSnowMalware #GoogleThreatIntelligenceGroup #Gtig #PhishingCampaign

Google Exposes Microsoft Teams Phishing Campaign Using Custom Snow Malware

Learn how Google uncovered a Microsoft Teams phishing campaign using custom Snow Malware and protect your organisation now with expert security tips.

OSINTSights

DarkSword: iOS-Exploit-Kit von Staatshackern und Spyware-Anbietern aktiv genutzt

Die Kette ermöglicht die vollständige Kompromittierung von iOS-Geräten und wurde gegen Ziele in Saudi-Arabien, der Türkei, Malaysia und der Ukraine eingesetzt. Alle betroffenen Schwachstellen sind inzwischen gepatcht.

https://www.all-about-security.de/darksword-ios-exploit-kit-von-staatshackern-und-spyware-anbietern-aktiv-genutzt/

#ios #spyware #gtig

DarkSword: iOS-Exploit-Kit von Staatshackern und Spyware-Anbietern aktiv genutzt

Googles GTIG deckt iOS-Exploit-Kit DarkSword auf – sechs Schwachstellen, drei Malware-Familien, mehrere Angreifer weltweit. Alle Lücken inzwischen gepatcht.

All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing, IT-Sicherheit, Netzwerksicherheit, KI, Threats, DDoS, Identity & Access, Plattformsicherheit
政府級黑客工具 Coruna 外洩 逾 4.2 萬舊 iPhone 中招 落入中俄犯罪份子手中
  Google 旗下威脅情報團隊(GTIG)與流動安全公司 iVerify 於 2026 年 3 […]
#科技新聞 #資訊保安 #Apple #iOS
https://unwire.hk/2026/03/10/coruna-ios-exploit-kit-iphone-attack/tech-secure/?utm_source=rss&utm_medium=rss&utm_campaign=coruna-ios-exploit-kit-iphone-attack
Google GTIG: 90 zero-day flaws exploited in 2025 as enterprise targets grow

Google’s GTIG tracked 90 zero-days exploited in the wild in 2025, with a growing number of attacks targeting enterprise systems.

Security Affairs