Daniel Kelley

United Kingdom

Founder and Cybersecurity Content Writer at Freelance

Featured in: Favicon

smh.com.au Favicon

theglobeandmail.com Favicon

livemint.com Favicon

esquire.com Favicon

thestar.com.my Favicon

securityboulevard.com Favicon

cloudsecurityalliance.org Favicon

slashnext.com

Articles

Xanthorox AI - The Next Generation of Malicious AI Threats Emerges

2 weeks ago | securityboulevard.com | Daniel Kelley

The Next Evolution in Black-Hat AIA new player has entered the cybercrime AI landscape – Xanthorox AI, a malicious tool that brands itself as the “Killer of WormGPT and all EvilGPT variants.”First spotted in late Q1 2025, Xanthorox began circulating in cybercrime communities across darknet forums and encrypted channels. The system is promoted as a highly modular AI platform tailored specifically for offensive cyber operations and privacy-conscious exploitation.
ai threats Archives

2 weeks ago | securityboulevard.com | Daniel Kelley

Xanthorox AI – The Next Generation of Malicious AI Threats EmergesThe Next Evolution in Black-Hat AI A new player has entered the cybercrime AI landscape – Xanthorox AI, a malicious tool that brands itself as the “Killer of WormGPT and all EvilGPT ...
PhishWP WordPress Plugin Turns Legit Sites into Phishing Traps | SlashNext

1 month ago | slashnext.com | Daniel Kelley

Phishing attacks have moved beyond simply sending emails with malicious links to incorporate more modern social engineering techniques, including the alarming trend of mixing in smishing (SMS phishing) and vishing (voice phishing). These techniques are a growing threat beyond email security and enhance cybercriminals’ capabilities to achieve their objectives using this new range of communication techniques.
From Phishing to Vishing - Modern Social Engineering Attacks

1 month ago | securityboulevard.com | Daniel Kelley

Phishing attacks have moved beyond simply sending emails with malicious links to incorporate more modern social engineering techniques, including the alarming trend of mixing in smishing (SMS phishing) and vishing (voice phishing). These techniques are a growing threat beyond email security and enhance cybercriminals’ capabilities to achieve their objectives using this new range of communication techniques.
reverse proxy Archives

2 months ago | securityboulevard.com | Daniel Kelley |Erik Hjelmvik |Vinugayathri Chinnasamy |Lucian Constantin
phishing kit Archives

2 months ago | securityboulevard.com | Daniel Kelley |Krishnan Subramanian |Lucian Constantin
Astaroth: A New 2FA Phishing Kit Targeting Gmail, Yahoo, AOL, O365, and 3rd-Party Logins

2 months ago | securityboulevard.com | Daniel Kelley

Phishing attacks continue to evolve, pushing even the most secure authentication methods to their limits. First advertised on cybercrime networks in late January 2025, Astaroth is a brand new phishing kit that bypasses two-factor authentication (2FA) through session hijacking and real-time credential interception. Astaroth utilizes an evilginx-style reverse proxy to intercept and manipulate traffic between victims and legitimate authentication services like Gmail, Yahoo, and Microsoft.
Devil-Traff: A New Bulk SMS Platform Driving Phishing Campaigns

2 months ago | securityboulevard.com | Daniel Kelley

Employees in most organizations receive countless communications daily—emails, Slack messages, or ticket updates, for example. Hidden among these routine interactions are phishing scams designed to exploit trust and compromise security. Imagine an employee receiving a text that appears to be from their bank: “Suspicious activity detected on your account. Click here to secure your account.” Or a message that mimics an IT ticket update: “Your password will expire soon.
PhishWP WordPress Plugin Turns Legit Sites into Phishing Traps | SlashNext

2 months ago | slashnext.com | Daniel Kelley

Employees in most organizations receive countless communications daily—emails, Slack messages, or ticket updates, for example. Hidden among these routine interactions are phishing scams designed to exploit trust and compromise security. Imagine an employee receiving a text that appears to be from their bank: “Suspicious activity detected on your account. Click here to secure your account.” Or a message that mimics an IT ticket update: “Your password will expire soon.
PhishWP WordPress Plugin Turns Legit Sites into Phishing Traps | SlashNext

Jan 5, 2025 | slashnext.com | Daniel Kelley

One morning, you decide to make a purchase from a seemingly reputable online store. The website displays a familiar checkout interface resembling Stripe’s payment process. You enter your payment details, feeling confident in the website’s legitimacy: Credit card number Expiration date CVV Billing addressYou even enter a one-time password (OTP) sent to your phone, believing it ensures your transaction’s security.