Phishing with Google Forms, Firebase and Docs: Detection and prevention
The COVID-19 pandemic spurred a massive shift toward telework as companies tried to both stay operational and safe. One of the biggest impacts of this shift...
Phishing
Phishing domain lawsuits and the Computer Fraud and Abuse Act
The worlds of trademark law and marketing seem to be constantly at odds with each other, occasionally collapsing into a court of law where they battle for...
Phishing: Reputational damages
When phishing and damages are thought of in the same sentence, the typical thoughts of many are the loss of data due to theft, identity theft and ultimately...
Spearphishing meets vishing: New multi-step attack targets corporate VPNs
Cybercriminals come out of the woodwork to take advantage of major events. Anything from the Olympics to the US elections is an opportunity to launch phishing...
Phishing attack timeline: 21 hours from target to detection
Phishing seems to be ever-present in the modern cyber-threat landscape. During the COVID-19 pandemic, there has even been an increase in phishing attacks...
Overview of phishing techniques: Brand impersonation
Phishing emails are well known for using different flavors of trickery to cause users to bite on the proverbial lure. Perhaps the phishing technique that...
BEC attacks: A business risk your insurance company is unlikely to cover
Business email compromise (BEC) attacks can cost an organization millions of dollars, and the threat is growing as more business activity takes place online....
Business email compromise (BEC) scams level up: How to spot the most sophisticated BEC attacks
The term “business email compromise” (BEC) refers to the use of email fraud with the aim to accomplish malicious purposes. BEC attacks usually rely on...
Cybercrime at scale: Dissecting a dark web phishing kit
The internet is like an iceberg: there is a lot more to it than can be seen from the surface. In addition to the surface web (what can be accessed and indexed...
Lockphish phishing attack: Capturing android PINs & iPhone passcodes over https
Phishing attacks are a common tactic for gaining initial access to a system. If an attacker can convince their target to hand over their login credentials or...