CERT24ThreatsDay: CEO Phishing Kits, 5K Dropbox Accounts and OAuth Traps
The weekly roundup describes multiple cyber threats, including impersonation of IT support through Microsoft Teams, ransomware operations, an SMS-delivered phishing-as-a-service platform, tax-themed DLL sideloading, phishing targeting CEOs, compromised Dropbox accounts, and malicious npm and PyPI packages referenced through AI-agent instructions. It also covers activity and infrastructure associated with, among others, the Iranian group Prince of Persia and the Russia-targeting VantaCore operation.