Google Calendar Phishing: Fake DocuSign Leads to Remote Access
A real Google Calendar invite can hide a fake DocuSign viewer. Learn…
Post-DEF CON Google Doc Phishing Delivers AMOS and NetSupport
A real Google Doc sidebar and fake DocSend installer delivered AMOS and…
iAuthFlow v2 Adds a Rogue Google Passkey That Survives Reset
iAuthFlow v2 can add an attacker-controlled Google passkey after a relayed phishing…
.vu Phishing Surge Uses 1,660 Domains to Steal Accounts
A .vu phishing operation used 1,660 short-lived domains and AiTM login relays.…
JWR Phishing Lets Attackers Control Checkout Live
JWR phishing streams card, password, ID, and 2FA input while an operator…
Roblox Check My Profile Friend Request Scam: What to Do
Got CheckMy_Profile or CheckMy_Description Roblox requests? Learn what is safe, when an…
“Assistance In Claiming The Money” Email Scam: What to Do
The “Assistance In Claiming The Money” email is a fake inheritance offer.…
Dropbox Purchase Order Email Scam: Check the Share Before Opening
A Dropbox purchase order email can be spoofed or sent through an…
Fake LastPass and Bitwarden Security Emails Push Downloads
Fake LastPass and Bitwarden security-policy emails use newsletter and compliance lookalike domains.…
PAXOS Token Launch Scam: Fake $PAXOS Wallet Trap
The fake $PAXOS Token Launch at paxolaunch.live targets PAX Gold holders with…
SharePoint Document Added to Your Workspace Email Scam
The SharePoint Document Added to Your Workspace email uses Document_INV86545.pdf and a…
Wells Fargo Account Security Update Email Scam: Fake Secure Message
The Wells Fargo Account Security Update email uses a fake Secure Message…