Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
BigBear phishing nets thousands of Microsoft 365 credentials
CloudSEK accessed the admin panel of BigBear 2.0, an Evilginx2-based phishing operation, revealing 5,137 stolen records from 461 organizations, includ
Free MyChart Medicare Kit Email Is a Phishing Scam
Emails offering a free MyChart Medicare Kit are phishing scams. Do not click links or provide personal information.
BigBear phishing crew steals thousands of Microsoft 365
The BigBear phishing group has compromised thousands of Microsoft 365 accounts via credential phishing campaigns.
Brazilian Gov Sites Hacked for Phishing
A Chinese-language group hacked Brazilian government and education servers to host phishing sites via a reverse-proxy network.
Vishing Attacks Target Microsoft 365 Accounts
Arctic Wolf reports IT help-desk vishing and stolen session tokens are enabling data theft and extortion against Microsoft 365 and SaaS accounts.
BigBear 2 PhaaS Steals 5,100+ Microsoft Credentials
Researchers uncovered BigBear 2.0, a phishing-as-a-service operation that has already stolen over 5,100 Microsoft 365 credentials from victims.
IT Help Desk Impersonation Bypasses MFA
Attackers posing as IT staff steal Microsoft 365 sessions, bypassing MFA to drain SaaS data and demand extortion.
Brand Impersonation Gap Wider Than Realized
Consumers face hundreds of fake brand sites and emails daily, widening the gap between what organizations control and what people trust.
How to Spot and Avoid Mac Phishing Scams
Phishing attacks target Mac users by tricking them into revealing passwords, codes, or payment info via fake messages from trusted brands.
Fake IT Calls Target Executives in Microsoft 365 Data Theft
Threat actors use IT help desk vishing and AitM token theft to steal Microsoft 365 data from executives, demanding extortion.
Hackers use invisible Unicode to hide phishing lures
Microsoft reports a phishing campaign using ASCII smuggling, where invisible Unicode characters hide malicious keywords to bypass email filters and AI
BigBear PhaaS bypasses MFA at 258 firms
BigBear 2.0 phishing service bypassed MFA at 258 organizations, stealing over 5,000 Microsoft 365 credentials via AiTM attacks.