[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

36 clusters · 228 sources · 103 days · First seen · Last updated

AI phishing evolution and AfD data breach fallout

Overview

The cyber-threat landscape is undergoing a rapid transformation driven by ‘phishing 3.0’, where AI agents automate research and adaptation to conduct multi-channel attacks using deepfakes, manipulated voices, and videos. Recent developments show a shift toward ‘agentic AI’, where autonomous multi-agent frameworks manage entire attack lifecycles. This includes the use of AI to generate malicious websites directly within browsers and the exploitation of ‘Shadow AI’. Newer attack vectors have emerged targeting trusted communication platforms. Researchers have identified SynkLoader, a polymorphic malware family that exploits Microsoft Teams by impersonating IT help desks. Additionally, calendar-based phishing attacks, or ‘calishing’, have seen a significant rise. Cybersecurity firm Check Point reported that since late September, over 300,000 messages—utilizing fake .ics files or fraudulent meeting links—have affected more than 40,000 organizations. A ‘dual-target’ phishing tactic has also been identified, utilizing prompt injection to deceive both human recipients and AI-powered email assistants. Political organizations in Germany remain significant targets. The Alternative for Germany (AfD) is investigating a massive data breach involving the theft of approximately 421,000 internal emails and 281 gigabytes of data from a hosting provider. The leak, attributed to a group named Hexane, has exposed internal tensions and financial irregularities. Investigations by Yle, OCCRP, and CORRECTIV have revealed that the party stored the personal data of at least 1,000 journalists publicly for years. Leaked communications from 2015 to 2017 further reveal that party leader Alice Weidel previously criticized Björn Höcke’s political positions as racist and problematic. The leak also raises questions regarding past campaign financing, specifically involving a 2017 social media campaign and 132,000 euros received from a Swiss-based billionaire. Furthermore, the leak has prompted fresh investigations into the party’s involvement in the 2017 ‘Extrablatt’ flyer campaign.

Entities

Microsoft · Alice Weidel · Germany · Kaspersky · Alexander Gauland

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [POLITICS] 2 sources
    AfD email leak reveals potential links to 2017 campaign funding

    Leaked emails from an AfD data breach suggest party leadership may have had greater involvement in 2017 campaign financing and donation matters than previously disclosed.

  2. [POLITICS] 5 sources
    AfD internal data leak reveals past criticisms and campaign financing questions

    Leaked AfD emails from 2015–2017 reveal Alice Weidel’s past criticisms of Björn Höcke and raise questions about her knowledge of illegal campaign donations.

  3. [TECHNOLOGY] 3 sources
    AI assistants face security risks from hidden email instructions

    Attackers are using prompt injection to hide malicious commands in emails, tricking AI assistants into performing unauthorized actions through invisible text or HTML comments.

  4. [POLITICS] 21 sources
    AfD faces fallout from massive data leak of 420,000 emails

    A massive data leak involving 420,000 AfD emails has exposed internal conflicts, sensitive journalist data, and personal information of individuals in Finland.

  5. [TECHNOLOGY] 3 sources
    Check Point warns of rising calendar phishing attacks

    Cybersecurity firm Check Point warns of a surge in ‘calishing’ attacks, where fake calendar invites are used to steal credentials and deploy malware across various platforms.

  6. [POLITICS] 18 sources
    AfD data leak exposes internal communications and donation scandal

    A massive leak of 421,000 AfD emails has exposed internal party tensions and potentially contradicts Alice Weidel’s previous statements regarding illegal Swiss campaign donations in 2017.

  7. [POLITICS] 2 sources
    Alice Weidel faces scrutiny over leaked AfD emails

    Leaked AfD emails suggest Alice Weidel knew about illegal 2017 Swiss campaign donations months earlier than she previously claimed.

  8. [POLITICS] 12 sources
    AfD data leak reveals internal documents and potential disinformation

    A hacker attack on an AfD service provider leaked roughly 421,000 emails and 300GB of data, revealing internal party communications and sparking a wave of AI-generated disinformation and legal disputes.

  9. [POLITICS] 32 sources
    AfD confirms major data breach involving 421,000 emails

    A cyberattack on an AfD hosting provider has leaked approximately 421,000 emails, including sensitive party data and controversial communications involving high-ranking members.

  10. [POLITICS] 30 sources
    German political parties AfD and CDU targeted in major cyberattacks

    German political parties AfD and CDU have faced cyberattacks, with the AfD suffering a massive data leak of over 421,000 emails and the CDU experiencing a phishing campaign targeting high-level officials.

  11. [TECHNOLOGY] 6 sources
    Phishing attacks target humans and AI assistants via prompt injection

    New phishing attacks are targeting both humans and AI email assistants using prompt injection to manipulate AI summaries and prioritize fraudulent instructions.

  12. [TECHNOLOGY] 2 sources
    Cybersecurity experts warn of rising calendar-based phishing attacks

    Cybersecurity experts warn of a surge in calendar-based phishing attacks, with reports showing a tenfold increase in August as attackers use AI to create more convincing fraudulent meeting invitations.

  13. [TECHNOLOGY] 2 sources
    Cybersecurity experts warn of Microsoft phishing exploits and rapid phishbot kits

    Cybersecurity experts warn of a surge in sophisticated phishing attacks exploiting Microsoft authentication and the availability of rapid-use phishbot kits for account theft.

  14. [TECHNOLOGY] 2 sources
    Cybersecurity threats evolve with SynkLoader malware and BlueKit phishing kits

    New cybersecurity threats include SynkLoader, a polymorphic malware exploiting Microsoft Teams for corporate attacks, and BlueKit, an automated phishing-as-a-service toolkit used for rapid account hijacking.

  15. [TECHNOLOGY] 3 sources
    Cybersecurity researchers warn of passkey phishing and AI-driven social engineering

    Attackers are using sophisticated social engineering and AI to impersonate IT help desks, using fake passkey requests to hijack enterprise cloud accounts and access sensitive data.

  16. [TECHNOLOGY] 2 sources
    Cybersecurity researchers warn of new Microsoft Teams and phishing attacks

    Cybersecurity researchers warn of evolving threats, including FireClient backdoor attacks via Microsoft Teams and novel phishing campaigns that use in-memory Blob URLs to bypass traditional web filters.

  17. [TECHNOLOGY] 4 sources
    Cybersecurity threats evolve through AI automation and browser exploits

    Threat actors are increasingly using AI-driven frameworks and chained browser vulnerabilities, such as the BlueMoon kit, to automate espionage and achieve high-level system access.

  18. [TECHNOLOGY] 5 sources
    Cybersecurity experts warn of risks in viral 1980s AI photo trend

    Cybersecurity experts and Indian police warn that viral 1980s-style AI photo trends are being exploited by fraudsters to steal sensitive personal data, banking credentials, and identity information.

  19. [TECHNOLOGY] 4 sources
    Cybersecurity risks rise for SMEs and telecom sectors via phishing and Shadow AI

    Cybersecurity risks are rising for SMEs due to increasing phishing attacks and for the telecom sector due to ‘Shadow AI’, where employees use unmonitored generative AI tools, risking data leaks.

  20. [TECHNOLOGY] 7 sources
    Cybersecurity threats evolve through AI and social media extortion

    Cybercriminals are using AI and social media copyright tools to conduct sophisticated scams, including deepfakes and extortion schemes targeting Instagram creators.

  21. [TECHNOLOGY] 3 sources
    AI-driven phishing and Android malware pose new security threats

    Cybersecurity threats are evolving with AI-driven phishing that generates malicious sites in browsers and Android malware targeting job seekers via fake interview apps.

  22. [TECHNOLOGY] 6 sources
    Police warn of 25 sophisticated cybercrime scenarios for 2026

    Police warn of 25 sophisticated cybercrime scenarios for 2026, highlighting the use of AI, Deepfake, and DeepVoice technology to impersonate officials and relatives for financial theft.

  23. [TECHNOLOGY] 3 sources
    Cybersecurity threats rise as attackers exploit enterprise collaboration tools

    Cybersecurity researchers report a fourfold rise in attackers abusing enterprise collaboration tools, prompting a shift toward Zero Trust Architecture to combat identity phishing and lateral movement.

  24. [TECHNOLOGY] 3 sources
    Cybersecurity strategies evolve amid rising AI threats and legacy technology use

    Cybersecurity strategies are evolving as organizations use legacy technology to reduce attack surfaces while Managed Service Providers adopt AI and automation to counter rapid, AI-driven phishing and malware.

  25. [TECHNOLOGY] 3 sources
    Cybersecurity trends show evolving phishing tactics and training effectiveness

    Cybercriminals are using calendar invites and phone calls to bypass security, but annual training can reduce employee phishing susceptibility by 83 percent, according to a new industry report.

  26. [TECHNOLOGY] 3 sources
    Cybersecurity threats rise as attackers impersonate Zoom and Outlook

    Cybersecurity experts warn of a surge in phishing attacks impersonating tools like Zoom and Outlook, while businesses focus on increasing resilience and insurance coverage during the post-summer return to work.

  27. [TECHNOLOGY] 3 sources
    Cybersecurity risks rise during summer vacation periods

    Cybercriminals exploit summer vacations to launch increased cyberattacks, targeting remote workers using public Wi-Fi, phishing, and AI-driven social engineering to bypass weakened corporate defenses.

  28. [TECHNOLOGY] 3 sources
    Cybersecurity landscape shifts toward AI threats and automated protection

    Enterprises are navigating evolving cybersecurity threats, including AI-assisted exploits, while new tools like Akamai’s AI assistant aim to bridge the gap between threat detection and rapid protection.

  29. [TECHNOLOGY] 31 sources
    AI-driven cyberattacks and deepfake fraud surge globally

    AI-driven cyberattacks rose 89% in 2025, with lateral movement speeds accelerating. Deepfake fraud is also surging, with crypto-related losses and home-made impersonation attempts seeing massive increases.

  30. [CRIME] 2 sources
    Cybercriminals target professionals via LinkedIn and WhatsApp scams

    Authorities warn of rising digital fraud, including LinkedIn recruitment scams stealing millions in crypto and WhatsApp investment schemes using fake AI promises and stolen brand identities.

  31. [TECHNOLOGY] 2 sources
    Cybersecurity threats evolve with AI-driven phishing 3.0

    Cybersecurity is shifting toward ‘phishing 3.0’, using AI and deepfakes to automate multi-channel attacks via voice and video, making identity theft harder to detect.

  32. [TECHNOLOGY] 2 sources
    Cybersecurity threats rise during peak travel and work transitions

    Cybercriminals are leveraging seasonal shifts to launch scams, targeting travelers with travel-themed phishing and employees with impersonations of workplace tools like Zoom and Outlook.

  33. [TECHNOLOGY] 6 sources
    Cybersecurity threats escalate via AI phishing and targeted spyware

    Cybersecurity threats are rising as attackers use AI-generated phishing, impersonate trusted work tools like Zoom, and target journalists with sophisticated spyware and social engineering tactics.

  34. [TECHNOLOGY] 2 sources
    Cybersecurity threats surge through social engineering and HTML smuggling

    Cybercriminals are increasingly using HTML smuggling, DCRat malware, and social engineering to bypass security, with a massive surge in government and family impersonation scams reported.

  35. [CRIME] 12 sources
    Phishing attacks and related cyber scams rise globally, targeting businesses and travelers

    Phishing hits 73% of Latin American firms, while WhatsApp hotel scams, Android screen‑overlay attacks, hotel Wi‑Fi hijacking, travel phishing and industrial phishing all surge worldwide.

  36. [TECHNOLOGY] 2 sources
    Open redirect attacks and phishing emails remain major cyber threats

    Open redirect flaws and phishing emails stay major cyber threats, letting attackers hijack trusted links and trick users, driving most data breaches.

Sources

24-ore.com · 24.hu · abendblatt.de · abranet.org.br · activenews.ro · ad-hoc-news.de · agendadigitale.eu · alexander-wallasch.de · alias.estadao.com.br · all-about-security.de · allgaeuer-anzeigeblatt.de · allgaeuer-zeitung.de · ambitur.pt · amica.de · andro4all.com · androidnews.de · archive.in.gr · augsburger-allgemeine.de · b2b-cyber-security.de · bbv-net.de · berlin-live.de · berliner-zeitung.de · bild.de · biometricupdate.com · bitcoinethereumnews.com · blog.knowbe4.com · blog.segurostv.es · blog.smlbrasil.com.br · borncity.com · brasil.estadao.com.br · businessinsider.nl · byc-news.de · cafef.vn · campustechnology.com · canarytrap.com · cbnews.fr · cmjornal.pt · codingfish.com · commonculture.org.uk · contabeis.com.br · corrierecomunicazioni.it · crime-nieuws.nl · crypto-insiders.nl · cryptobriefing.com · cryptoslate.com · cxoinsightme.com · cyberinsider.com · cybernoz.com

This summary has been updated 43 times: see revision history