Browser Security

Cybercriminals Launch Massive Holiday-Themed Phishing Domain Campaign

Nishant Sharma

29 Nov 2025 — 1 min read

This newsletter is AI generated and may hallucinate sometimes 😊

Hackers Register 18,000 Holiday-Themed Domains for Cyberattacks

Researchers identified over 18,000 newly registered domains using holiday-related keywords like "Christmas," "Black Friday," and "Flash Sale," designed for phishing, malware distribution, and brand impersonation.
These malicious domains aim to exploit the heightened online shopping activity during the holiday season, deceiving users with fake offers and impersonating legitimate retailers.
Users and organizations are urged to exercise extreme caution, verify website authenticity, and implement advanced security measures to mitigate the risks associated with these widespread holiday-themed cyber threats.

Source: Cybersecurity News | Date: November 5, 2025

References

Hackers Registered 18,000 Holiday-Themed Domains Targeting ‘Christmas,’ ‘Black Friday,’ and ‘Flash Sale’ - Cybersecurity News

Read more

Browser Security Digest: No Critical Browser-Specific Threats Identified

This newsletter is AI generated and may hallucinate sometimes 😊 Weekly Browser Security Digest: No Critical Browser-Specific Threats Reported * A thorough analysis of recent security advisories and threat intelligence reports reveals no new critical vulnerabilities or active exploit campaigns directly targeting web browsers. * This review focused on web rendering engines, JavaScript

Browser Threats: GoldPickaxe, Opera Neon AI Prompt Injection

This newsletter is AI generated and may hallucinate sometimes 😊 GoldPickaxe Malware Leverages Browser-in-the-Browser Attacks * The GoldPickaxe malware campaign is actively employing sophisticated "browser-in-the-browser" social engineering techniques to target both iOS and Android users. * Attackers are using this method to steal sensitive information, including facial scan data and various

Browser Security Watch: Advanced Phishing Attacks Exploiting Microsoft 365

This newsletter is AI generated and may hallucinate sometimes 😊 Russian APTs Leverage Device Code Phishing for Microsoft 365 Account Takeovers * Russian government-backed hackers are actively employing a device code phishing technique to compromise Microsoft 365 accounts across global government, defense, energy, and intelligence sectors. * This attack bypasses traditional multi-factor authentication

Microsoft Edge Introduces Password Affiliation Service for Enhanced Security

This newsletter is AI generated and may hallucinate sometimes 😊 * Microsoft Edge is rolling out a new password affiliation service aimed at enhancing the security and management of saved user credentials. * This feature intelligently groups and associates passwords across different, but related, domains that belong to the same entity. * By understanding