Google Threat Intelligence Group

Evolution of AI-driven deepfake scams and defensive tech

58 clusters · 301 sources · last updated 2 days ago

Latest: Government and officials warn of rising AI-driven risks and scams

Cybersecurity authorities continue to warn of evolving deepfake scams using artificial intelligence to impersonate trusted individuals. In India, SEBI has warned of the ‘Boss Scam,’ while the Telecom Regulatory Authority

AI phishing evolution and AfD data breach fallout

35 clusters · 227 sources · last updated 3 days ago

Latest: AfD internal data leak reveals past criticisms and campaign financing questions

The cyber-threat landscape is undergoing a rapid transformation driven by ‘phishing 3.0’, where AI agents automate research and adaptation to conduct multi-channel attacks using deepfakes, manipulated voices, and videos.

AI fraud surge drives shift to biometric and continuous ID

46 clusters · 178 sources · last updated 5 days ago

Latest: Identity fraud networks utilize AI and voice cloning to target victims

As AI-driven fraud and deepfakes escalate, the digital identity market is shifting toward integrated biometric and continuous authorization models. In Sweden, the merger of Precise Biometrics and Fingerprint Cards aims t

Evolution of AI-driven cybercrime and agentic risks

36 clusters · 304 sources · last updated 8 days ago

Latest: AI tools uncover critical cybersecurity vulnerabilities

The rapid expansion of the artificial intelligence industry has introduced new vectors for criminal activity, ranging from physical hardware theft to sophisticated digital fraud. Frontier AI models are presenting escalat

Exploitation of remote support and network security software

3 clusters · 14 sources · last updated 13 days ago

Latest: Cisco and BeyondTrust patch critical security vulnerabilities

Security researchers have identified high-impact exploitation campaigns targeting critical software infrastructure, specifically focusing on remote support and network security tools. A zero-day vulnerability (CVE-2026-

AOMEI Backupper supply chain attack

2 clusters · 3 sources · last updated 15 days ago

Latest: AOMEI Backupper software compromised in supply chain attack

Between April and July 2026, a threat actor tracked as UNC7017 executed a supply chain campaign targeting AOMEI Backupper and AnyViewer software. Attackers utilized brief tampering windows of only five to ten minutes to

ShinyHunters and Clop cybercrime conflict

13 clusters · 272 sources · last updated 20 days ago

Latest: FBI arrests Canadian negotiator in ShinyHunters hacking crackdown

A public confrontation has emerged between cybercrime syndicates ShinyHunters and Clop. In late September 2026, ShinyHunters reportedly hijacked Clop’s dark web leak site by exploiting an unauthenticated file upload vuln