WhatsAppening here?

A senior executive at a major global stock exchange was silently compromised for five months by a highly disciplined cyber espionage campaign that exfiltrated data from their Outlook account with surgical precision. Unlike typical attacks that trigger alarms, the attackers used legitimate-looking system tasks, hid their activity through services like Dropbox and OneDrive, and moved data in tiny, undetectable increments—demonstrating that patience and operational stealth can outperform brute-force tactics. This case underscores a growing threat: attackers aren't just after quick wins, but are willing to dwell for months to harvest high-value intelligence. Meanwhile, a separate story reveals a shocking scam where a LinkedIn consultant openly offered to sell fake cybersecurity certifications—including CISSP and Salesforce—directly, bypassing exams entirely. The scammer’s urgency to move the conversation to WhatsApp, a known evasion tactic, confirms the fraud. These stories reveal a new era of social engineering: not just impersonating people, but selling the illusion of legitimacy itself.