#phishing

• Fake WatchGuard VPN Site Stole Admin Logins, Then Served the Real App

  A lookalike WatchGuard download page collected VPN server addresses, usernames and passwords, then handed over the real signed installer so nothing looked wrong.

• Fake Calendar Invites Hit 40,000 Firms in Microsoft Phishing Surge

  Check Point Research says hundreds of thousands of fake calendar invites and .ics attachments are being used to steal Microsoft 365 logins from more than 40,000 organizations.