January 9th, 2025

Cyber Mornings Daily · Jan 9, 2025 · 11m

First, a phishing scheme where attackers used legitimate PayPal email addresses to gain control of users' accounts. This scheme involved creating an email distribution list with an attacker-controlled address and using PayPal to send a payment request to that address, ultimately linking the victim’s account to the attacker’s email. Next, over 4,000 abandoned web backdoors were hijacked by registering expired domains. These backdoors, found on servers of high-profile targets, were sinkholed to prevent malicious actors from gaining control. Finally, a cyberattack launched by Ukrainian…