This section is prepared for future source-aware coverage. The MVP uses static placeholder entries until the editorial workflow is ready.
BleepingComputer - Aug 4, 2026
Phishing service spoofs RingCentral to steal Microsoft 365 accounts
A security report says the Greatness phishing-as-a-service platform has grown beyond basic credential theft. It is now being used for adversary-in-the-middle attacks and device-code phishing, with pages that spoof RingCentral to target Microsoft 365 accounts.
Warning signs to consider
Unexpected Microsoft 365 sign-in prompts.
Login pages that look like RingCentral but feel slightly off.
Requests to enter or approve device codes you did not ask for.
RFK Jr., Oz blame ACA enrollment drop on fraud, but experts cite rising costs
The article says the Trump administration, including RFK Jr. and Dr. Oz, linked a drop in Affordable Care Act enrollment to fraud. But experts in the piece point to rising premiums as the main reason many people left their coverage. The story contrasts political claims about fraud with the cost pressures facing ACA enrollees.
Warning signs to consider
A major claim is made that fraud explains a large enrollment drop.
The article suggests a possible mismatch between political messaging and the cost reality described by experts.
Rising premiums are described as a strong pressure that can affect coverage decisions.
A phishing campaign is using worry about a recently disclosed COLDCARD wallet issue and a suspected $88.6 million Bitcoin theft to lure people into installing ScreenConnect, a remote access tool. The message appears designed to look urgent and makes the situation seem more serious so users may act quickly without checking carefully. The report says the attack targets people concerned about the wallet security news.
Warning signs to consider
Urgent messages tied to a security scare or theft report.
How AI-powered phishing killed blocklists for good
The article says AI is making phishing harder to stop because attackers can spin up disposable sites and quickly change their tools. Because of this, simple blocklists for bad domains may not keep up. The piece says browser-level detection that looks at attack behavior, not just website names, may work better.
Warning signs to consider
Phishing pages that keep changing domain names
Attackers using short-lived or disposable web infrastructure
Unidentified ransomware, no note � encrypted .xlsx, need family ID
A BleepingComputer forum post describes a Windows PC that was hit by ransomware after a fake Samsung phishing email led to a fake update popup. The user says files like .xlsx were encrypted, but no ransom note was found, and they were asking for help identifying the ransomware family.
Warning signs to consider
Phishing email pretending to be from a known brand.
A fake update popup after opening the message.
Sudden file encryption, including common document types like .xlsx.
France is banning unsolicited telemarketing calls starting next week
France is set to ban unsolicited telemarketing calls starting Aug. 11, according to the Associated Press. The change comes after years of complaints about intrusive calls, and the new law is meant to reduce consumer annoyance and help limit fraud risks.
Warning signs to consider
Unexpected sales calls from unknown numbers.
Calls that push quick decisions or pressure you to respond.
Caller claims that sounds official but was not requested.
ROL Investors Have Opportunity to Join Rollins, Inc. Fraud Investigation with SBS Law
A Business Wire item picked up by the Associated Press says Schall, Brown & Schwartz LLP is investigating claims on behalf of investors of Rollins, Inc. The notice is framed as a fraud investigation and invites investors to take part. The description does not give details about the underlying claims or any finding of wrongdoing.
Warning signs to consider
A law-firm announcement that uses the word "fraud" can signal a serious dispute.
The message is brief and does not include supporting facts in the description.
Investor-focused notices can sometimes be used to draw attention quickly.
PNR CLASS ACTION NOTICE: Glancy Prongay Wolke & Rotter LLP Files Securities Fraud Lawsuit On Behalf Of Pentair plc Investors
A press release says a law firm has filed a securities fraud class action lawsuit on behalf of investors in Pentair plc. The notice says the case was filed in federal court in New York and names the lawsuit as Aaron Walters v. Pentair and others. This is a legal notice about an investor lawsuit, not a report of a consumer scam.
Warning signs to consider
A formal class action notice can attract people who may be contacted about joining a case.
Messages about investor claims can be used to push people toward unsolicited calls, emails, or forms.
Press releases about lawsuits can be repeated or reshared in ways that make them look like confirmed findings.
Amazon fined $2.25M for withholding evidence from fraud victims
The U.S. Federal Trade Commission (FTC) says Amazon will pay a $2.25 million civil penalty to settle charges that it blocked identity theft victims' access to transaction records. [...]
LastPass, Bitwarden users targeted with fake security alerts
BleepingComputer reports that LastPass is warning users about an ongoing phishing campaign aimed at LastPass and Bitwarden users. The scam uses fake security alerts to push people toward fraudulent websites that look like real service notices.
Warning signs to consider
Unexpected security alerts about your password manager account.
Messages that push you to click a link right away.
Websites that look similar to the real service but may not be official.
Class action suit against AI makers over deepfake child sexual abuse material expands
According to NPR, a class action lawsuit against AI makers has expanded with new plaintiffs who say AI tools from SpaceXAI and Stability AI were used to create sexually explicit deepfake images of them as children. The report says the case is about alleged misuse of AI to make child sexual abuse material-like images.
Warning signs to consider
Claims that AI tools were used to make explicit images of minors.
Deepfake images can be created from limited or stolen source material.
Reports involving sexualized images of children are highly serious and harmful.
Amazon fined $2.25 million for failing to help identity theft victims
The Federal Trade Commission fined Amazon $2.25 million to settle claims that the company failed to help customers who fell victim to identity theft, as reported earlier by Bloomberg. In its complaint, the FTC accuses Amazon of refusing to provide customers w…
Google Earth’s AI deepfake tool only lasted one day
According to The Verge, Google launched a Google Earth feature on Thursday that let users edit satellite images with text prompts using AI, but the company shut it down after one day. The report says the tool could be used to make AI versions of real places, which raised concern about how realistic fake images can be made from real-world views.
Warning signs to consider
AI tools that change real images can make fake scenes look believable.
Text-prompt editing may blur the line between real satellite imagery and made-up content.
Fast changes or sudden shutdowns can be a sign the feature raised concerns.
Phishing poses as big-brand job interview to steal Google accounts
BleepingComputer reports on a phishing campaign that pretends to be job interviews for well-known companies to trick marketing professionals into giving up Google account credentials. The scheme reportedly uses more than 30 big-brand names, including Adobe, Netflix, Coca-Cola, and OpenAI, to make the fake interview messages look believable.
Warning signs to consider
Unexpected job interview invitations from companies you did not contact.
Messages that pressure you to sign in or share Google account details.
Recruitment emails that use famous brand names but may come from unusual sender addresses.
Russian hackers exploit Zimbra zero-click flaw for email theft
CISA says a Russian state-sponsored group called Laundry Bear, also known as Void Blizzard, is targeting organizations that use Zimbra Collaboration email servers. The report says the group is using phishing along with a now-patched Zimbra flaw to steal email content. The title describes the issue as a zero-click flaw, meaning the attack may not require the target to open a message first.
Warning signs to consider
Unexpected or urgent emails that try to get people to respond or click.
Messages that seem to come from trusted contacts but feel slightly off.
Unusual activity on email systems tied to Zimbra Collaboration.
New Helix vishing group emerges in SharePoint data theft attacks
A BleepingComputer report says a new data-extortion group called Helix is using identity-focused tricks to steal data from SharePoint environments. The reported methods include voice phishing, device code phishing, and abuse of multi-factor authentication. The article frames this as a new group emerging in SharePoint data theft attacks.
Warning signs to consider
Unexpected calls or messages asking for login help or verification codes.
Requests to approve sign-ins or enter device codes you did not start.
Repeated MFA prompts or login alerts that seem out of place.
ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit
A new phishing-as-a-service (PhaaS) platform dubbed "ARToken" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [...]
WhatsApp phishing attack uses fake business docs to hack PCs
A report says an ongoing malware campaign is targeting WhatsApp users in several countries. The messages appear to use fake business documents and push VBScript files that can lead to remote access on a computer. The story warns that the attack is built around convincing people to open files that look important or work-related.
Warning signs to consider
Unexpected WhatsApp messages with document attachments or download links.
Files that look like business paperwork but use unfamiliar file types.
Pressure to open a file quickly because it seems important.
ICE Is Using Data Broker Tools to ‘Identify Unaccompanied Minors’ and ‘Fraud’
According to the Wired report, ICE has renewed a $25 million-per-year contract with a Thomson Reuters subsidiary that gives the agency more access to data-broker style tools. The story says the tools are being used to help identify unaccompanied minors and people suspected of fraud, expanding ICE’s reach under the Trump administration.
Warning signs to consider
Large-scale use of personal data by government agencies can raise privacy concerns.
Data-broker tools can make it easier to track or profile people.
The phrase 'identify unaccompanied minors' suggests sensitive use of personal information.
Ex-NFL receiver Alshon Jeffery reaches deal to have fraud charges dismissed
USA Today reports that former NFL receiver and Super Bowl winner Alshon Jeffery reached a deal that could dismiss felony fraud charges if he meets certain conditions. The report says the case is still tied to those conditions, and the outcome is not described as final in the provided details.
Warning signs to consider
Felony fraud charges were part of the report.
The outcome depends on meeting conditions, so the matter is not fully settled.
The description gives only limited details about what the alleged fraud involved.
Healthtech firm Xolis suffers data breach impacting 1.4 million people
According to the provided report, healthcare technology company Xsolis said a phishing attack gave attackers access to its network and exposed sensitive data linked to nearly 1.4 million people. The item says this was a data breach tied to unauthorized access, but the full details of what was taken were not included in the snippet.
Warning signs to consider
Unexpected emails asking staff to click links, open files, or sign in again.
Reports of network access following a phishing message.
According to NPR, Cambodia is cracking down on cyber scam compounds linked to human trafficking, and thousands of workers have been freed. The report says many of those people are now stuck without housing or a clear way to return to their families, turning the crackdown into a humanitarian crisis.
Warning signs to consider
Large scam operations tied to trafficking or forced labor.
People being held in compounds with limited freedom to leave.
Freed individuals left without shelter, money, or transport home.
Webinar: How attackers bypass MFA and how defenders can respond
This webinar says some modern phishing attacks can get around multi-factor authentication (MFA) without needing to steal passwords. It mentions Device Code phishing as one method and says behavioral AI may help security teams spot compromised accounts faster.
Warning signs to consider
Messages or pages pushing users to enter device codes or sign in through unusual prompts.
Phishing that still succeeds even when MFA is turned on.
Unexpected account activity that may signal a compromised login.
Democrats are focused on affordability. Some say they should focus on democracy too
This NPR story says some Democratic leaders want the party to talk more about democracy, not just affordability. The concern is that President Trump may keep repeating claims of election fraud that have not been proven.
Warning signs to consider
Unfounded claims about election fraud.
Political messages that use fear or doubt without proof.
Pressure to accept big claims about elections without evidence.
Lawmakers grill national intelligence director nominee at confirmation hearing
According to NPR, Jay Clayton, President Trump's nominee for director of national intelligence, faced sharp questions during a Senate confirmation hearing about the president's claims of election fraud. The hearing focused on whether those claims would affect the role of the nation's top intelligence official.
Warning signs to consider
Claims of election fraud can spread confusion if they are repeated without clear evidence.
Public statements from leaders can influence how people understand major events.
Political pressure on intelligence roles can make it harder to trust official information.
New phishing kits target Microsoft 365 accounts, evade MFA
A report from BleepingComputer says two phishing kits, called Jalisco and OmegaLord, were found being used against Microsoft 365 accounts. The kits are described as using methods that can get around multi-factor authentication, which can make fake sign-in attacks harder to spot.
Warning signs to consider
Unexpected Microsoft 365 sign-in pages or prompts.
Messages pushing users to sign in quickly or re-check their account.
Login requests that seem normal but may be part of a fake sign-in flow.
New Forg365 phishing platform uses AI to target Microsoft 365 accounts
A BleepingComputer report dated July 9, 2026 says a new phishing-as-a-service platform called Forg365 is targeting Microsoft 365 accounts. The report says the operation uses adversary-in-the-middle and device code methods, along with AI-assisted lure writing, to make phishing attempts more convincing.
Warning signs to consider
Messages that push Microsoft 365 login prompts.
Requests to enter device codes or sign in through unfamiliar pages.
Phishing lures that sound polished or unusually convincing.
TreasuryDirect email sparks scam fears as alert hits savers
USA Today reports that TreasuryDirect is emailing savers to ask them to check their bank information. The message has caused scam fears because it looks similar to warnings that fraudsters often use. The article says the email is legitimate and is meant to help account holders review their details.
Warning signs to consider
Unsolicited messages that ask you to act quickly or check account details.
Emails that look like official notices but create fear or urgency.
Messages that mimic bank or government alerts, which can be easy to confuse with scams.
Webinar: Why traditional email security is no longer enough
Modern phishing, business email compromise, and account takeover attacks increasingly exploit trusted identities and legitimate business workflows, making them harder for traditional email defenses to detect. This webinar explores how behavioral AI can help o…
She thought she donated $50. A tap-to-pay scam took $1,000 instead
USA Today reports on a tap-to-pay scam where a woman believed she was donating $50, but ended up losing $1,000 instead. The story says experts are warning that this kind of scam may not be widely known yet, and some victims can lose money without ever handing over a credit card.
Warning signs to consider
A payment request that seems small but results in a much larger charge.
Being asked to tap a card or device in a quick, pressure-filled moment.
Unexpected charges after what was supposed to be a simple donation.
Scam victims can owe taxes on stolen money. A bill in Congress could offer relief
A CNBC report says some scam victims may still owe taxes on money that was stolen from them, and a bill in Congress could change that. The bill would bring back an older rule that usually allowed tax deductions for theft losses, while also adding more help for people who lost money to fraud.
Warning signs to consider
Money that was stolen may still be treated in a way that creates a tax burden.
Tax rules for fraud losses can be confusing and may change based on law.
People who were scammed may not realize there are tax consequences tied to the loss.
Trump promised evidence of election fraud. Experts say there was none
According to NPR, President Trump gave a primetime address saying U.S. elections have "shocking vulnerabilities" and promised evidence of election fraud. The report says election experts described many of his claims as old concerns rather than new proof, and said there was no evidence presented in the address to support the fraud claims.
Warning signs to consider
Big claims of fraud without clear evidence.
Language that suggests urgent or hidden danger in elections.
Reused concerns presented as if they are new discoveries.
3 Ways AI Powers Service Desk Attacks and How to Prevent Them
This article says AI is helping service desk impersonation attacks become harder to spot. The main concern is that scammers can use AI to make fake requests sound more convincing, more personal, and easier to repeat at scale. The piece also mentions practical ways organizations can improve onboarding and identity checks to reduce these risks.
Warning signs to consider
Urgent requests to reset access or change account details.
Messages that sound highly personalized but come from an unverified source.
Requests that push staff to skip normal identity checks.
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis. [...]
Self-exiled Chinese billionaire gets 30 years in US jail for ‘astonishing’ fraud
A self-exiled billionaire Chinese business tycoon once believed to be among China’s wealthiest men was sentenced Monday to 30 years in a U.S. prison for a ma...
LOST CRYPTO FUNDS SUCCESSFULLY RECOVERY EMAIL CAPITALCRYPTORECOVER@ZOHOMAIL. COM
A forum post on BleepingComputer describes someone saying they lost crypto in a bitcoin trading and romance-fraud-related scam, then sharing an email address that claims to recover lost crypto funds. The post suggests the person was trying to get help after losing about $78.4 USDT through an online investment platform. The wording of the post and the recovery email look like a possible scam or recovery scheme.
Warning signs to consider
Promises of recovering lost crypto funds.
A random email address used as the main contact.
Links to a romance fraud and online investment loss story.
Fraud alerts, credit locks, dark web scans — this $99.99 LifeLock plan does the worrying for you
This PCWorld piece is about a sale on LifeLock Core Identity Theft Protection, priced at $99.99 for 15 months. The article says the plan includes features like fraud alerts, credit locks, and dark web scans, and presents the service as a way to help people worry less about identity theft.
Warning signs to consider
The piece is marketing a paid protection product.
Claims about protection services can sound broad or reassuring without showing exactly what they do.
Identity-theft-related ads often use fear of fraud to encourage quick purchases.
Is Your SSO Protected Against Modern Credential Attacks?
The article says single sign-on (SSO) can be a big target because one stolen login may open access to many work apps and services. It highlights stronger passwords, phishing-resistant multi-factor authentication, and identity hardening as ways to make SSO safer against modern credential attacks.
Warning signs to consider
One login being used across many business apps.
Weak or reused passwords tied to a central sign-in system.
SSO setups that rely on MFA methods that can be phished.
