The article discusses how deleteduser.com domains, which can be purchased for $15, often contain sensitive personal information from previous owners. These domains become repositories of Personally Identifiable Information (PII) that can be exploited by malicious actors. The piece highlights the security risks associated with these recycled domains.
A new phishing-as-a-service called Starkiller uses disguised links to load real login pages from target brands. It acts as a relay between victims and legitimate sites, forwarding usernames, passwords, and MFA codes to bypass security measures.
An investigation uncovered a large network of fake support groups on Telegram that spread cryptocurrency stealers and drainers. The network was found to be actively promoting malicious tools designed to drain crypto wallets.