New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs

Multiple active campaigns and exploited vulnerabilities pose elevated risk: a new automated phishing platform (Venom) and Venom Stealer MaaS are driving large-scale credential and crypto theft targeting executives; modern infostealers (Storm, Phantom, DeepLoad) and AiTM phishing campaigns against services like TikTok for Business are evading controls; supply-chain compromises (axios npm, TeamPCP PyPI/telnyx, LiteLLM) and GitHub-used C2 techniques are spreading RATs and stealers; EtherRAT and other malware hide C2 in smart contracts. Critically, attackers are actively exploiting high-severity,