CloudZ Malware Abuses Phone Link to Steal SMS OTPs

Multiple high-impact security stories: Cisco Talos uncovered the CloudZ RAT with a Pheno plugin abusing Microsoft Phone Link to intercept SMS one‑time passwords. Microsoft warned of a mass phishing campaign using fake compliance emails targeting ~35,000 users. Other notable incidents include Rapid7’s discovery of an Iran‑linked APT conducting a Chaos ransomware false‑flag, Venomous#Helper phishing deploying signed RMM for persistent access, a trojanized supply‑chain compromise of a Yanbian gaming platform (Windows/Android), and a malicious npm dependency that spreads like a worm and targets or