Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
GCash Warns Users of Scams, Touts GInsure
GCash reminds Filipinos to stay vigilant against phishing, smishing, and impersonation scams, highlighting its PHP 30 GInsure protection feature.
Russian Hackers Phish EU Officials on Signal, WhatsApp
EU governments are shifting from popular messaging apps as Russian threat actors target officials via Signal and WhatsApp phishing campaigns.
JavaScript Obfuscation: From Party Trick to Phishing Kit
JavaScript obfuscation has evolved from a novelty into a core tactic in phishing kits, hiding malicious code from security tools and analysts.
Polymorphic Phishing Page Self-Breaks
A polymorphic phishing page that occasionally breaks itself was analyzed. It adapts to evade detection but has flaws.
NovaCookies Phishing Kit Steals Microsoft 365 Sessions
A new phishing toolkit called NovaCookies abuses genuine DocuSign notifications to steal Microsoft 365 sessions via adversary-in-the-middle attacks.
AI Travel Scams Rise: Protect Your Holiday
AI-powered travel scams, including identity theft and fake damage claims, are increasing. Learn how to protect yourself from these deceptive tricks.
AnonyMousKIT Phishing Kit Targets iPhone Users
SOCRadar discovered AnonyMousKIT, a phishing kit that abuses Apple's Lost Mode to steal credentials from iPhone users via fake Find My pages.
AnonyMousKIT PhaaS Uses AI Voice Calls to Steal iPhone
SOCRadar discovered AnonyMousKIT, a phishing-as-a-service platform that uses AI voice calls to steal Apple ID credentials and bypass Activation Lock o
EU officials targeted in WhatsApp account takeover attempts
Foreign governments attempted to hack WhatsApp accounts of senior EU officials, as revealed in an internal EU document from July.
NovaCookies AitM Kit Steals Microsoft 365 Sessions for
NovaCookies, an adversary-in-the-middle phishing kit, is sold for $320/month, enabling attackers to steal Microsoft 365 session cookies and bypass MFA
AI Voice Phishing Targets Apple Users for Passcodes
A phishing-as-a-service platform uses AI voice agents posing as Apple Support to steal passcodes and 2FA codes from victims of stolen devices.
Fake Recruiters Steal Corporate Credentials via BitB
Scammers posing as HR staff use browser-in-the-browser attacks to steal corporate passwords during fake job interviews, warns Zimperium.