• North America
• United States
• Spearphishing Link
• Match Legitimate Name Or Location
• Ingress Tool Transfer
• Disable Or Modify Tools
• Telecommunications
• Sudo And Sudo Caching
• Credentials In Files
• Unix Shell
• Spectrum
• Amos

New Clickfix Infostealer Campaign Targets macOS Users

Cybersecurity researchers have identified a new malware campaign that uses social engineering tactics to distribute an information stealer known as Atomic macOS Stealer (AMOS) targeting Apple macOS systems. The campaign employs typosquatting domains that mimic the U.S.-based telecom provider Spectrum, tricking users into executing a malicious shell script that steals system passwords and downloads the AMOS variant. The attack begins on a fake webpage that prompts users to complete a CAPTCHA verification, ultimately leading them to execute harmful commands under the guise of fixing a non-existent issue. The campaign is believed to be orchestrated by Russian-speaking cybercriminals, as indicated by the presence of Russian language comments in the malware's code.

• W_Tchdogs
• Superloop
• Australia And New Zealand
• Telecommunications
• Australia

Threat Actor Sells Access to Superloop

On May 28, 2025, the threat actor w_tchdogs claimed to have breached Superloop, an Australian telecommunications company. The actor is offering access to Superloop’s internal portal, which allegedly includes domain administration tools and other sensitive resources, for $750.

• Telcel
• Telecommunications
• Latin America And The Caribbean
• Mexico
• Viralgod

Threat Actor Claims Breach of Mexican Telcel

In May 2025, a threat actor named Eternal claimed to have breached Telcel Mexico and to have gained access to its database. According to the threat actor, 10 million lines of data belonging to Telcel's customers were taken, including phone numbers, tax IDs (RFC), full names, and full addresses.

• North America
• Telecommunications
• Cellcom
• United States

Cellcom Reports Data Breach Following Outages

In May 2025, mobile carrier Cellcom became the victim of a cyberattack that caused widespread service outages and disruptions across Wisconsin and Upper Michigan. According to Cellcom, while the incident affected voice and SMS services, there is no evidence that personal information, such as names, addresses, or financial data, was compromised during the attack.