Ledger Phishing Ads Turn a Fake Device Check Into a Seed-Phrase Trap
Google ads led Ledger users through cloud redirects to a fake device…
Coinbase Impersonator Stole $16M Through “Safe” Wallets
A new sentence exposes how fake Coinbase support moved victims’ crypto into…
Claude Max Giveaway Fakes a Google Window to Steal Logins
A fake Claude Max gift draws its own Google sign-in window. See…
Fake Drawing Votes Target Telegram Accounts, Ukraine Warns
A fake drawing contest turns a vote into a Telegram login. Ukraine…
T-Mobile Points Scam: New Research Tracks 81 Phishing Domains
New T-Mobile phishing research tracks changing texts and 81 domains. Learn the…
Fake Avast Renewal Page Hid an Unfinished Cancellation Form
A fake €129.99 Avast renewal page asked for contact details, but its…
BigBear 2.0 Phishing: What to Do After Microsoft 365 MFA
BigBear 2.0 phishing can steal Microsoft 365 sessions after MFA. What to…
Google Calendar Phishing: Fake DocuSign Leads to Remote Access
A real Google Calendar invite can hide a fake DocuSign viewer. Learn…
Post-DEF CON Google Doc Phishing Delivers AMOS and NetSupport
A real Google Doc sidebar and fake DocSend installer delivered AMOS and…
iAuthFlow v2 Adds a Rogue Google Passkey That Survives Reset
iAuthFlow v2 can add an attacker-controlled Google passkey after a relayed phishing…
.vu Phishing Surge Uses 1,660 Domains to Steal Accounts
A .vu phishing operation used 1,660 short-lived domains and AiTM login relays.…
JWR Phishing Lets Attackers Control Checkout Live
JWR phishing streams card, password, ID, and 2FA input while an operator…