Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Bank of America Phishing Scam Hijacks Devices
Huntress warns of phishing emails spoofing Bank of America that trick Windows users into installing ScreenConnect, handing device control to hackers.
Fake Party Invitation Scam Can Hijack Your Computer
Cybercriminals send fake party invitations that appear to come from friends, tricking users into clicking malicious links that can hijack their comput
Kali365 abuses M365 device-code logins
Kali365 phishing kit targets US orgs via Microsoft device-code flow, stealing OAuth tokens without passwords. Over 80 sandbox sessions linked.
COLDCARD Phishing Uses ScreenConnect RAT
A phishing campaign impersonating COLDCARD exploits wallet vulnerability fears and an $88.
Greatness PhaaS targets Microsoft 365 via RingCentral spoof
ZeroBEC reports Greatness PhaaS now bypasses MFA to phish Microsoft 365, iCloud, Yahoo, and Google Workspace accounts using spoofed RingCentral emails
Hackers Waited 3 Months to Steal $1.2M in Wire Fraud
Hackers breached a real estate closing company's servers, waited three months, then intercepted a wire transfer, stealing $1.
AI Phishing Outpaces Blocklists, 89% of Domains Active
AI-driven phishing campaigns now outpace blocklists, with 89% of phishing domains active under two days.
Navy Veteran With Dementia Loses $100K in Scam
An 81-year-old retired Navy chief with dementia was scammed out of $100,000 and nearly lost his home in a sweepstakes fraud.
BoA Phishing Uses ScreenConnect, Hard to Remove
A phishing campaign impersonating Bank of America tricks Windows users into installing ScreenConnect, then complicates removal.
Fake Bank of America Phishing Installs ScreenConnect Malware
Cybercriminals use a fake Bank of America phishing campaign to deliver a malicious script that installs ScreenConnect, granting remote access and pers
Kali365 Phishing Platform Targets US Corporate Data
Kali365, a Phishing-as-a-Service platform, exploits Microsoft device login to steal US corporate credentials and data.
Fake Teams Alerts Phish via Microsoft Login
A phishing campaign uses fake Teams notifications to direct victims to a legitimate Microsoft sign-in page, then tricks them into granting permissions