Watchers Lab

Instead of harvesting credentials for later use, attackers now synchronize their activity with victims in real time, authenticating against legitimate insurance portals as victims unknowingly complete the login process. The entire attack can unfold within a single browsing session.As phishing campaigns become more sophisticated, simply identifying malicious websites and impersonation domains is no longer enough.Unlike traditional banking attacks that primarily target financial transactions, compromised insurance accounts often contain extensive personal information, identity documents, policy records, payment methods, and other sensitive customer data that can support fraud far beyond the initial compromise.That means that you and I are are immenintly in danger of being compromised in more creatively perpetrated ways so stay on guard at all times. Don't click that link unless you are sure it is legit, and ask your AI to take a look too. It is not the final answer but it can definitely identify fishy attributes.. Be vigilant. Be a Watcher!

ChatGPT is experiencing a major outage, and users are unable to load chats, including previous conversations. The outage started at approximately 5 AM ET and is affecting users worldwide, including those in the US and Europe. ChatGPT will get stuck at loading animations for the sidebar, and you won't be able to send messages due to "too many concurrent requests" errors. This outage also affects OpenAI's coding platform, Codex. Thankfully, OpenAI is aware of these issues and has already acknowledged them on the status page. Let's hope they sort it out soon!

ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The operation has been active since late 2024 and is localized to 25 languages in 12 countries, primarily in Asia Pacific and Latin America. A filtering system ensures that only real targets (retail traders and crypto investors) land on the malicious pages, while researchers, scanners, and security bots are redirected to blank pages.

DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playing and during playback. The feature is enabled by default in the latest versions of DuckDuckGo for iOS, Mac, and Windows, while Android users can enable it manually by going to Settings > Ad Blocking. DuckDuckGo's new ad-blocking mechanism is separate from 'Duck Player,' an embedded YouTube player in the browser that uses YouTube's strictest privacy settings to prevent tracking cookies and personalized ads.