Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Fake CAPTCHA tricks Windows users into running malware
Malicious pages impersonate Cloudflare and other trusted services, instructing Windows users to paste commands into PowerShell or Command Prompt, lead
FBI Warns of OAuth Consent Phishing Attacks
The FBI warns that clicking 'Allow' on Google and Microsoft permission screens can let hackers access entire accounts via OAuth consent phishing.
Phishing Kit Adds 700 Pages After Takedown
A phishing-as-a-service operation persisted after a takedown, generating over 700 new phishing pages within a month.
eBay Disables DMs to Thwart Phishing Scams
eBay has disabled private messaging on its discussion boards to combat a phishing campaign targeting users.
Researchers Create Fake Firm to Study Job Scams
Researchers posed as a fake company to investigate employment scams, revealing tactics used to deceive job seekers.
Microsoft Teams IT Support Scam Deploys Node.js Implant
Microsoft observed a campaign abusing Teams to impersonate IT support, gaining remote access and deploying a Node.
Spring Ring Exploits Teams External Access
Unit42 disclosed Spring Ring on Aug 31, 2026, showing attackers weaponize Teams external access for domain compromise.
Spring Ring vishing gang targets Microsoft Teams users
The 'Spring Ring' operation uses vishing to compromise Microsoft Teams users, enabling remote session access, malware spread, and infrastructure takeo
Russian Hacker Faces 20 Years for US Phishing
A Russian national was extradited and indicted for a phishing campaign that infected 80,000 PCs and stole credentials and personal data.
Russian Hacker Indicted for Phishing 80,000 PCs
Russian national Searzhudin Tamirlanovich Aktulaev was indicted in California for phishing attacks that infected over 80,000 computers, stealing data
X Money launch sparks mass password reset phishing
X users received unsolicited password reset emails after X Money's launch, prompting warnings of a coordinated phishing attempt.
Scammers Target Toll Scams via Email and Text
Nine in ten toll scams arrive by email or text, showing scammers are more strategic in targeting victims with fake unpaid-toll threats.