Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Greatness PhaaS Adds Device Code Phishing to Bypass MFA
The Greatness phishing kit now supports device code phishing, abusing OAuth 2.0 Device Authorization Grant to bypass MFA and steal tokens.
Greatness PhaaS Adds Device-Code Phishing
Greatness PhaaS now supports device-code phishing to steal access tokens without credentials, combining AiTM and OAuth abuse.
Greatness PhaaS spoofs RingCentral to steal Microsoft 365
The Greatness phishing-as-a-service platform now uses adversary-in-the-middle and device-code phishing to target Microsoft 365 accounts, spoofing Ring
Smishing Guide: Verify Before You Tap
A guide warns about smishing scams using fake package delays, tolls, and bank alerts, advising users to verify links before tapping.
Microsoft: Russian hackers hijack hotel Wi-Fi
Microsoft warns that Russian group Storm-2945 is hijacking hotel Wi-Fi to steal Microsoft 365 accounts in an operation called CaptiveCrunch, active si
APT29 hijacks hotel Wi-Fi portals in new attacks
Russian APT29 (Midnight Blizzard) hijacks hotel and conference Wi-Fi captive portals to redirect victims to fake Microsoft 365 logins or update pages,
Cloud Platforms Used to Bypass MFA in AitM Attacks
Researchers found cloud-based AitM attacks using service workers and Ultraviolet to bypass MFA, hosted on Cloudflare Workers, Vercel, Netlify, GitHub
AI-Powered Phishing Emails Now Nearly Indistinguishable
Cybercriminals are using generative AI to craft phishing emails that are linguistically flawless and structurally similar to legitimate messages, maki
Midnight Blizzard Hijacks Hotel Wi-Fi in Global Phishing
Russia-linked Midnight Blizzard compromised hotel and conference Wi-Fi portals worldwide, redirecting guests to phishing pages and fake updates to ste
Hardware Wallet Firms Warn of Phishing Surge After Coldcard
Trezor and Foundation report increased phishing attacks on hardware wallet users following the Coldcard exploit, with losses nearing $130 million.
Fake Event Invites: Phishing Scam or Sudden Popularity?
Users report receiving unsolicited email invitations from friends, raising concerns about a phishing scam.
Fake IRS letters target cryptocurrency holders
Scammers are sending fraudulent letters to crypto holders, claiming they must register with a 'Digital Asset Compliance Portal' to steal personal info