Google Spoofed Via DKIM Replay Attack
Learn how a convincing Google spoof used a DKIM replay attack to bypass email security and trick users with a fake subpoena. A real-world phishing example you need to see.
PhaaS actor uses DoH and DNS MX to dynamically distribute phishing
Large-scale phishing attacks use DoH and DNS MX records to dynamically serve fake login pages
Recruitment Phishing Scam Imitates Hiring Process
A phishing campaign is using CrowdStrike recruitment branding to deliver malware disguised as a fake application. Learn more.
Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft
We uncovered a malvertising campaign where the threat actor hijacks social media pages, renames them to mimic popular AI photo editors, then posts malicious links to fake websites.