Phishing as a Service Archives

Smishing at Scale: What Our Expert Panel Revealed About the Mobile Phishing Supply Chain

Christine Castro | May 4, 2026 | Blog / Insights, credential theft, Fraud & Account Takeover, identity threat intelligence, Phishing as a Service, smishing, Threat Intelligence & Exposure Monitoring, toll road fraud, WMC Global

Recap of the live panel hosted by Constella and WMC Global on April 30, 2026 ▶ Watch the full recording If you’ve gotten a text recently warning you about an unpaid toll, ...

Constella Intelligence, Constella Intelligence

Booking.com Breach Shows Exactly How Smishing Attacks Get Made

Christine Castro | April 17, 2026 | Blog / Insights, Constella identity intelligence, Fraud & Account Takeover, mobile fraud webinar, Phishing as a Service, PII mobile fraud, smishing attack pipeline, Threat Intelligence & Exposure Monitoring, travel data breach phishing, WhatsApp phishing travel

Booking.com's breach exposed names, phone numbers, and booking details now being used in targeted WhatsApp phishing. Constella explains how the PII-to-smishing pipeline works and what to do about it ...

Constella Intelligence

The Dark Web Explained with John Hammond

The dark web is often misunderstood, but it plays an important role in both privacy technology and cybercrime activity. In this episode, Tom Eston speaks with cybersecurity researcher and educator John Hammond ...

Shared Security Podcast

Starkiller Phishing Framework Bypasses Defenses with Reverse Proxies, Takes an SaaS Approach

Teri Robinson | February 25, 2026 | Abnormal Security research, account takeover, credential harvesting, Docker-based phishing, FIDO2, headless Chrome phishing, identity security, MFA Bypass, Mobile Phishing, Passkeys, Phishing as a Service, phishing detection, QR Code Phishing, reverse proxy phishing, SaaS-style phishing, session token theft, SMS phishing, zero trust

Starkiller is a new SaaS-style phishing framework that runs real brand websites inside headless Chrome containers, acting as a live reverse proxy to steal credentials, session tokens, and MFA-protected accounts while evading ...

Security Boulevard

Sue The Hackers – Google Sues Over Phishing as a Service

Mark Rasch | November 19, 2025 | CFAA, civil cyber litigation, cyber defense strategy, cybercrime infrastructure, cybersecurity law, domain seizures, hacking lawsuits, Meta legal actions, Microsoft botnets, Phishing as a Service, private right of action, RICO

Google’s Lighthouse lawsuit signals a new era in cybersecurity, where companies use civil litigation—including the CFAA, Lanham Act, and RICO—to dismantle phishing networks, seize malicious infrastructure, and fight hackers when criminal prosecution ...

Security Boulevard

Google Uses Courts, Congress to Counter Massive Smishing Campaign

Jeffrey Burt | November 16, 2025 | google, lawsuit, lighthouse, Phishing as a Service, smishing scams, Smishing Triad

Google is suing the Smishing Triad group behind the Lighthouse phishing-as-a-service kit that has been used over the past two years to scam more than 1 million people around the world with ...

Security Boulevard

Five Ways Spear Phishing Tactics are Evolving in 2025

SlashNext Research Team | December 10, 2024 | deepfake, Lazarus attackers, linkedin, Microsoft Teams, Operation Dream Job, PHaaS, Phishing, Phishing as a Service, QR code, smishing, SMS, spear-phishing, WhatsAoo

What type of phishing became very effective around 2010 and still worries security teams today? Spear phishing. Spear phishing remains highly effective and is getting more dangerous by the day. What is ...

SlashNext

Five Ways Spear Phishing Tactics are Evolving in 2025

SlashNext

EvilProxy Phishing Campaign Targets High-Level Executives

Jeffrey Burt | August 9, 2023 | Cybersecurity, EvilProxy, Malware, MFA, Phishing, Phishing as a Service

An EvilProxy phishing campaign is targeting high-level executives and highlighting the growing use of advanced PhaaS kits ...

Security Boulevard

MFA, security, Google Cloud, Oasis, MFA, Telegram cybercrime phishing

Microsoft Finds Phishing Op Behind Enterprise Campaigns

Teri Robinson | September 23, 2021 | cybercrime tactics and techniques, Microsoft, Phishing, Phishing as a Service

A phishing-as-a-service (PhaaS) operation, dubbed BulletProofLink and discovered by Microsoft, has been behind a number of phishing campaigns against the private sector. Researchers at the tech giant uncovered the operation after finding ...

Security Boulevard

Phishing as a Service

Smishing at Scale: What Our Expert Panel Revealed About the Mobile Phishing Supply Chain

Booking.com Breach Shows Exactly How Smishing Attacks Get Made

The Dark Web Explained with John Hammond

Starkiller Phishing Framework Bypasses Defenses with Reverse Proxies, Takes an SaaS Approach

Sue The Hackers – Google Sues Over Phishing as a Service

Google Uses Courts, Congress to Counter Massive Smishing Campaign

Five Ways Spear Phishing Tactics are Evolving in 2025

Five Ways Spear Phishing Tactics are Evolving in 2025

EvilProxy Phishing Campaign Targets High-Level Executives

Microsoft Finds Phishing Op Behind Enterprise Campaigns

Senator Sanders Wants to Own AI Companies — and Hand America’s Adversaries the Keys

NIST’s Nine: The PQC Signature Race Moves to Round Three

The Quantum Arms Race: Why Washington Just Wrote a $2 Billion Check to Nine Companies

Beyond Moore’s Law: The Hyper-Acceleration of Autonomous AI Cyber Capabilities

The Exception Economy: When Security Teams Stop Protecting and Start Negotiating

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On