Microsoft: Email Exceptions Let Detected Spoofing Through
Microsoft’s Q3 report shows how mail exceptions overrode detection. The 63% figure…
Trojan:JS/Phish!MSR: Cache, Extension, or Phishing File?
Trojan:JS/Phish!MSR can appear in cached scripts, extensions or saved files. Match the…
Tesla Purchase Order Email Scam: Where the “Download Order” Button Points
A fake Tesla supplier email asks for a quote on order 176629.…
Fake Teams Support Calls Led to Privileged Certificates and Data Theft
Microsoft traces two Teams help-desk scams into AD CS certificate abuse. One…
QuickBooks Phishing Uses Callback Traps and Invisible Tracking
Infoblox traced more than 350 QuickBooks-lookalike domains to callback phishing. A hidden…
Fake Cloudflare Check Sends Windows and Mac Users to Run Commands
A fresh ClickFix lure uses Run on Windows and Terminal on Mac.…
Fake 6,500 UAH Aid Offers Led to Bank-Account Theft
Ukrainian police describe how a fake aid offer collected card secrets and…
Fake Amazon Music Deal Targets YouTube Creators
A fake Amazon Music portal uses real YouTube statistics to sell a…
YAM Store Takedown Hits the Wholesale Side of Phishing
Microsoft and partners disrupted YAM Store and phishing-kit suppliers. See how stolen…
Fake Calendly Interviews Steal Facebook and Google Logins
Fake Meta Careers booking pages relay Facebook codes and Google approvals. Learn…
A Name and a Question Mark: The Text Scam Reply Trap
A new SMS example contains only a name and a question mark.…
GitPower Uses Fake Conference Invitations to Target Ukrainian Experts
Genians links fake conference invitations to GitPower attacks on Ukrainian experts. A…
