A sophisticated phishing campaign exploiting OpenAI’s ChatGPT has targeted over 12,000 users, spoofing subscription renewal notices to steal credentials and payment details. Using urgency triggers and domain spoofing, attackers deployed a malicious site resembling official communications. Security experts recommend implementing DMARC policies, monitoring spoofing, and enforcing multi-factor authentication to mitigate risks, as AI-driven cybercrime trends rise sharply.

Chinese hackers evade ESET with MAVInject.exe
Chinese hacking group Earth Preta has been found using a novel technique to bypass antivirus software using a valid Microsoft tool, MAVInject.exe. The group’s malware