Scam Everything - Opioids, NetFlix, Phish, Covid Charities, and Government Refunds in one network neighborhood

Scam Everything – Opioids, NetFlix, Phish, Covid Charities, and Government Refunds in one network neighborhood

There's a famous line in the movie Jerry McGuire where Tom Cruise's character says "Show me the Money!" In online investigations, I prefer the line "Show me the Data!" This morning I ...
Fear as part of my pretext

Is It Legit to Use Fear as Part of My Pretext?

One question I get asked often is, “Chris, isn’t it legit to use fear as part of my pretext in a social engineering exercise? I mean, after all, the bad guys are ...
Phishing Threat Actor Blocking Techniques: Geoblocking by IP

Phishing Threat Actor Blocking Techniques: Geoblocking by IP

| | blocking, geoblocking, Phish
In order to increase the lifespan of phishing attacks most threat actors implement evasion techniques to keep their phishing sites from being detected by security professionals ...
Threat Announcement: Phishing Sites Detected on Emoji Domains

Threat Announcement: Phishing Sites Detected on Emoji Domains

| | Phish, Threat analysis
Since September 21, PhishLabs analysts have detected a number of phishing sites hosted on emoji domains. So far, all detected sites have a few things in common: ...
Liar, liar, pants on fire! Barclays phish claims cards explode

Liar, liar, pants on fire! Barclays phish claims cards explode

We feel compelled to relay the dire warning from this Barclays snail-mail letter, which we acquired through social media, therefore it must be true. Categories: Cybercrime Social engineering Tags: barclayscredit cardfailfakeLOLphishquality controlscamsnail ...

Not looking phishy, and not hitting the panic button

An excellent ESET article on not grooming people into accepting phishing messages, plus ESET advice on the 'Sextortion and leaked passwords' story ...
Social media: A treasure trove of spam and scams

Social media: A treasure trove of spam and scams

How do spammers know how to target you for scams? They use social media to produce the most convincing types of spam. Categories: Cybercrime Social engineering Tags: login credentialsnigerianphishphishingPieter Arntzsocial mediaspam (Read ...
Is it a Phish? May 25 Edition

Is it a Phish? May 25 Edition

This week we are putting our brand new marketing team member, Rachel, to the task of hopefully getting us to our first perfect streak. And because she’s new to the team we ...
Are Phishing Simulations a Replacement For Training? No.

Are Phishing Simulations a Replacement For Training? No.

Sending a simulated phishing attack is now more accessible than ever thanks to a recent update from Microsoft and the various other free offerings, and many organizations have been pushing them out ...

Secure Guardrails