The Latest Breaking News from Unit 42

Iran-Linked Hackers Used Fake Recruiter Lures to Spy On Engineers And Access Critical Systems: Report

Iran-linked hackers posed as job recruiters to target software engineers in the aviation, oil, and gas sectors, using fake job postings and malware-laced videoconferencing tools in an espionage campaign aimed at workers with access to critical systems.

International Business Times · May 22

How cyberattacks are being used as weapons in the Iran war

State-linked and hacktivist groups have claimed a series of cyberattacks against the United States and Israel since the war with Iran began.

Euronews · Mar 18

Hackers are using LLMs to build the next generation of phishing attacks - here's what to look out for

What if a phishing page was generated on the spot, with no visible malicious code or payload?

TechRadar · Jan 26

Microsoft SharePoint worries increase as ransomware gangs join the party, experts warn

Despite being addressed weeks ago, the ToolShell vulnerability is still apparently being exploited.

TechRadar · Aug 5, 2025

That's a new one: Iranian hackers pretend to be a modelling agency to try and steal user details

A German modelling agency was being spoofed in an attempt to steal sensitive system data.

TechRadar · Jun 2, 2025

AWS misconfigurations reportedly used to launch phishing attacks

Hackers are abusing AWS instances to bypass email security and launch successful phishing attacks.

TechRadar · Mar 4, 2025

A new Linux backdoor is hitting US universities and governments

Auto-color granted its operators full access to compromised endpoints, allowing them to run malware remotely, and more.

TechRadar · Feb 26, 2025

Fake DocuSign and HubSpot phishing emails target 20,000 Microsoft Azure accounts

The campaign, which targeted 20,000 Microsoft Azure accounts, has been disrupted.

TechRadar · Dec 19, 2024

North Korean hackers linked to Play ransomware attacks

Jumpy Pisces is moving away from espionage and into ransomware, offering IAB services to peers.

TechRadar · Oct 31, 2024

Software developers targeted by malware hidden in Python packages

Lazarus is back with more fake jobs, tricking Python devs into installing malware.

TechRadar · Sep 24, 2024