open-menu
closeme
Brand impersonation: Meta/Facebook
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: PayPal
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fake voicemail notification (untrusted sender)
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
HR Impersonation via E-sign Agreement Comment
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Norton
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: storematch.jp
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Stripe
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Google Presentation Open Redirect Phishing
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: fenc.com
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: Club-OS
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: stats.lib.pdx.edu
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: magneticmarketing.com
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: ringaraja.net
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: DocuSign branded attachment lure with no DocuSign links
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Google Share Notification with Suspicious Comments
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Employee Impersonation: Payroll Fraud
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Office file contains OLE relationship to credential phishing page
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious mailer received from Gmail servers
calendar
Oct 8, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
ClickFunnels link infrastructure abuse
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
VIP impersonation with charitable donation fraud
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft with low reputation links
calendar
Oct 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Dell
calendar
Oct 4, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
BEC/Fraud - Student loan callback phishing
calendar
Oct 4, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: FedEx
calendar
Oct 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Jensi File Preview Link from Unsolicited Sender
calendar
Oct 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: PIRL San Diego
calendar
Oct 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Decoy PDF Author (Julie P.)
calendar
Oct 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Multistage Landing - Microsoft Forms Abuse
calendar
Oct 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious DocuSign Share From New Domain
calendar
Oct 1, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing: Fake Password Expiration from New and Unsolicited sender
calendar
Oct 1, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: ShareFile
calendar
Oct 1, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Wise
calendar
Oct 1, 2024
·
Share on:
twitter
facebook
linkedin
copy
Reconnaissance: All recipients cc/bcc'd or undisclosed
calendar
Sep 30, 2024
·
Attack surface reduction
Deliverability testing
·
Share on:
twitter
facebook
linkedin
copy
Reconnaissance: Large unknown recipient list
calendar
Sep 30, 2024
·
Attack surface reduction
Deliverability testing
·
Share on:
twitter
facebook
linkedin
copy
Fake Zoho Sign template abuse
calendar
Sep 30, 2024
·
Share on:
twitter
facebook
linkedin
copy
Extortion / Sextortion in Attachment From Untrusted Sender
calendar
Sep 30, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: DHL
calendar
Sep 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential phishing: Engaging language and other indicators (untrusted sender)
calendar
Sep 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: Image as content with Hidden HTML Element
calendar
Sep 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Netflix
calendar
Sep 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: Attendee List solicitation
calendar
Sep 26, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing: DocuSign embedded image lure with no DocuSign domains in links
calendar
Sep 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
EML attachment with credential theft language (unknown sender)
calendar
Sep 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Sender name contains Active Directory distinguished name
calendar
Sep 25, 2024
·
Suspicious sender
·
Share on:
twitter
facebook
linkedin
copy
Link: Suspicious Sharepoint Folder Share
calendar
Sep 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Adobe image lure in body or attachment with suspicious link
calendar
Sep 20, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Aramco
calendar
Sep 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Adobe with suspicious language and link
calendar
Sep 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious link to Looker Studio (lookerstudio.google.com) from a new and unsolicited sender
calendar
Sep 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fake email quarantine notification
calendar
Sep 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Extortion / Sextortion - PDF attachment leveraging breach data from freemail sender
calendar
Sep 18, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Mailgun
calendar
Sep 18, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Archive containing disallowed file type
calendar
Sep 18, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Enbridge
calendar
Sep 18, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: events.csiro.au
calendar
Sep 18, 2024
·
Share on:
twitter
facebook
linkedin
copy
PayPal Invoice Abuse
calendar
Sep 18, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: phoenixartstudio.net
calendar
Sep 18, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Webflow Link from Unsolicited Sender
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: eodcnetworkdirect.com
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Wells Fargo
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Sharepoint fake file share
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Multistage Landing - Abused Google Drive
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing: Fake Storage alerts (unsolicited)
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Interac
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Fake secure message and suspicious indicators
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious newly registered reply-to domain with engaging financial or urgent language
calendar
Sep 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
HTML smuggling containing recipient email address
calendar
Sep 13, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: EML with link to credential phishing page
calendar
Sep 13, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing: Suspicious subject with urgent financial request and link
calendar
Sep 13, 2024
·
Share on:
twitter
facebook
linkedin
copy
Cyrillic vowel substitutions with suspicious subject from unknown sender
calendar
Sep 13, 2024
·
Share on:
twitter
facebook
linkedin
copy
QR Code with suspicious indicators
calendar
Sep 13, 2024
·
Share on:
twitter
facebook
linkedin
copy
Salesforce Infrastructure Abuse
calendar
Sep 13, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious message with unscannable Cloudflare link
calendar
Sep 13, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: American Express (AMEX)
calendar
Sep 12, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Signature Travel Network
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: DocSend
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Indeed
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: pmifunds.com
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: secondstreetapp.com
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: City of Calgary
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Newegg
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Artisteer
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fake Message Thread - Untrusted Sender with a Mismatched Freemail Reply-To Address
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: Fake photo share
calendar
Sep 11, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: TikTok
calendar
Sep 10, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fraudulent E-commerce Operators
calendar
Sep 10, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Suspicious SharePoint Document Name
calendar
Sep 10, 2024
·
Share on:
twitter
facebook
linkedin
copy
Extortion / sextortion (untrusted sender)
calendar
Sep 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: emlakarsa
calendar
Sep 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing: Suspicious E-sign Agreement Document Notification
calendar
Sep 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: emp.eduyield.com
calendar
Sep 6, 2024
·
Share on:
twitter
facebook
linkedin
copy
Corporate Services Impersonation Phishing
calendar
Sep 5, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: DocuSign
calendar
Sep 5, 2024
·
Share on:
twitter
facebook
linkedin
copy
Microsoft Infrastructure Abuse With Suspicious Patterns
calendar
Sep 4, 2024
·
Share on:
twitter
facebook
linkedin
copy
Callback phishing via Intuit service abuse
calendar
Sep 4, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: Default Microsoft Exchange Online sender domain (onmicrosoft.com)
calendar
Aug 29, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Business Email Compromise (BEC) with request for mobile number
calendar
Aug 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential phishing: 'Secure message' and engaging language
calendar
Aug 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML smuggling with atob and high entropy
calendar
Aug 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Github
calendar
Aug 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Microsoft Planner With Suspicious Link
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Stripe Notification
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: IndiaTimes
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
BEC with unusual Reply-to or Return-path mismatch
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Honorific greeting BEC attempt with sender and reply-to mismatch
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious Recipients pattern with no Compauth pass and suspicious content
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML smuggling with excessive string concatenation and suspicious patterns
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Encrypted PDF With Credential Theft Body
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Adobe (QR code)
calendar
Aug 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: artkaderne
calendar
Aug 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: bestdeals.today
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: chkc.com.hk
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: documentmailbox.com
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: ExacTag
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: g7.fr
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: isadatalab.com
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: LearningApps
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: Medium
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: PremierBet
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: ust.hk
calendar
Aug 22, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Multistage Landing - Abused Docusign
calendar
Aug 20, 2024
·
Share on:
twitter
facebook
linkedin
copy
Impersonation: Fake Gmail Attachment
calendar
Aug 20, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Amazon
calendar
Aug 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Commonly abused sender TLD with engaging language
calendar
Aug 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Impersonation: Human Resources with link or attachment and engaging language
calendar
Aug 12, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: DoorDash
calendar
Aug 12, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft (QR code)
calendar
Aug 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: Single recipient duplicated in cc
calendar
Aug 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Dropbox
calendar
Aug 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fake thread with suspicious indicators
calendar
Aug 7, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Callback Phishing in body or attachment (untrusted sender)
calendar
Aug 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Callback Phishing solicitation in message body
calendar
Aug 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Microsoft 365 Credential Phishing
calendar
Aug 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Zoom (strict)
calendar
Aug 4, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious Attachment: Duplicate decoy PDF files
calendar
Aug 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: RTF file with suspicious link
calendar
Aug 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Twitter
calendar
Aug 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Google Drive abuse: Credential phishing link
calendar
Jul 31, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential phishing language and suspicious indicators (unknown sender)
calendar
Jul 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Callback Phishing solicitation via pdf file
calendar
Jul 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
VIP impersonation: Fake thread with display name match, email mismatch
calendar
Jul 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential phishing content and link (untrusted sender)
calendar
Jul 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: QR code with credential phishing indicators
calendar
Jul 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Callback Phishing solicitation via text-based file with a large unknown recipient list
calendar
Jul 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Callback Phishing via DocuSign comment
calendar
Jul 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Abused Adobe Express
calendar
Jul 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link to auto-download of a suspicious file type (unsolicited)
calendar
Jul 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Sublime Security
calendar
Jul 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious SharePoint File Sharing
calendar
Jul 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Credential Phishing traversing Russian infrastructure
calendar
Jul 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Fake attachment image lure
calendar
Jul 19, 2024
·
Suspicious attachment
Suspicious content
·
Share on:
twitter
facebook
linkedin
copy
AnonymousFox Indicators
calendar
Jul 19, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: UPS
calendar
Jul 17, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect: Cartoon Network
calendar
Jul 17, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Nested Doubleclick.net
calendar
Jul 17, 2024
·
Share on:
twitter
facebook
linkedin
copy
Employee impersonation with urgent request (untrusted sender)
calendar
Jul 17, 2024
·
Share on:
twitter
facebook
linkedin
copy
Constant Contact link infrastructure abuse
calendar
Jul 16, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fake request for tax preparation
calendar
Jul 12, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: SharePoint files shared from GoDaddy federated tenants
calendar
Jul 12, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Fake shipping notification with link to free file hosting
calendar
Jul 10, 2024
·
Share on:
twitter
facebook
linkedin
copy
Cyrillic vowel substitution in subject or display name from unknown sender
calendar
Jul 10, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: VK
calendar
Jul 9, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Chase Bank
calendar
Jul 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: LinkedIn
calendar
Jul 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Secure SharePoint file share from new or unusual sender
calendar
Jul 8, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Doubleclick.net
calendar
Jul 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Barracuda Networks
calendar
Jul 8, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML with JavaScript Functions for HTTP requests
calendar
Jul 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Recipient Domain in URL Path
calendar
Jul 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft
calendar
Jul 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft with embedded logo and credential theft language
calendar
Jun 28, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Ledger
calendar
Jun 27, 2024
·
Cryptocurrency
·
Share on:
twitter
facebook
linkedin
copy
Link: Free Subdomain host with undisclosed recipients
calendar
Jun 27, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft quarantine release notification in body
calendar
Jun 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft quarantine release notification in image attachment
calendar
Jun 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Job Scam (unsolicited sender)
calendar
Jun 24, 2024
·
Share on:
twitter
facebook
linkedin
copy
Business Email Compromise (BEC) attempt from untrusted sender
calendar
Jun 24, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML with Hidden Body
calendar
Jun 24, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential phishing: Onedrive impersonation
calendar
Jun 18, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Bank of America
calendar
Jun 14, 2024
·
Share on:
twitter
facebook
linkedin
copy
COVID-19 themed fraud with sender and reply-to mismatch
calendar
Jun 13, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: DocuSign (QR code)
calendar
Jun 12, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Callback Phishing solicitation via image file
calendar
Jun 12, 2024
·
Share on:
twitter
facebook
linkedin
copy
VIP / Executive impersonation in subject (untrusted)
calendar
Jun 11, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Fake scan-to-email message
calendar
Jun 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Sendgrid onmicrosoft.com domain phishing
calendar
Jun 6, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: EML file with HTML attachment (unsolicited)
calendar
Jun 6, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Lookalike sender domain (untrusted sender)
calendar
Jun 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Advance Fee Fraud (AFF) from freemail provider or suspicious TLD
calendar
Jun 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Twitter infrastructure abuse via link shortener
calendar
Jun 3, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
BEC/Fraud: Scam Lure with freemail pivot
calendar
Jun 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Outlook
calendar
May 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Quickbooks
calendar
May 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Mass campaign: recipient address in subject, body, and link (untrusted sender)
calendar
May 29, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: Unsolicited malformed PDF
calendar
May 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: PDF with suspicious language and redirect to suspicious file type
calendar
May 22, 2024
·
Malfam: QakBot
·
Share on:
twitter
facebook
linkedin
copy
Impersonation: Suspected supplier impersonation with suspicious content
calendar
May 21, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: Link to blob.core.windows.net from new domain (<30d)
calendar
May 21, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Small text file with link containing recipient email address
calendar
May 14, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Klaviyo
calendar
May 14, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Fake scan-to-email
calendar
May 14, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Google Ad Services
calendar
May 10, 2024
·
Share on:
twitter
facebook
linkedin
copy
Low reputation link to auto-downloaded HTML file with smuggling indicators
calendar
May 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
Truth Social infrastructure abuse via link redirect
calendar
May 9, 2024
·
Share on:
twitter
facebook
linkedin
copy
VIP / Executive impersonation (untrusted)
calendar
May 7, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Fake DocuSign HTML table not linking to DocuSign domains
calendar
May 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Sharepoint
calendar
May 6, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML file with reference to recipient and suspicious patterns
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: PDF file with low reputation link to ZIP file (unsolicited)
calendar
May 3, 2024
·
Malfam: QakBot
·
Share on:
twitter
facebook
linkedin
copy
Attachment: PDF file with low reputation links to suspicious filetypes (unsolicited)
calendar
May 3, 2024
·
Malfam: Ave Maria
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Amazon with suspicious attachment
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Binance
calendar
May 3, 2024
·
Cryptocurrency
·
Share on:
twitter
facebook
linkedin
copy
Credential phishing: Engaging language with IPFS link
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Domain Impersonation: Freemail ReplyTo_Local Lookalike with Financial Request
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fake shipping notification with suspicious language
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Microsoft Dynamics 365 form phishing
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Request for Quote or Purchase (RFQ|RFP) with suspicious sender or recipient pattern
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spoofable internal domain with suspicious signals
calendar
May 3, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
VIP Impersonation via Google Group relay with suspicious indicators
calendar
May 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: DocuSign with embedded QR code
calendar
May 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: QuickBooks image lure with suspicious link
calendar
May 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Microsoft impersonation via PDF with link and suspicious language
calendar
May 2, 2024
·
Malfam: Pikabot
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing: Hyper-linked image leading to free file host
calendar
May 2, 2024
·
Share on:
twitter
facebook
linkedin
copy
Suspicious recipient pattern and language with low reputation link to login
calendar
Apr 30, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Calendar invite with suspicious link leading to an open redirect
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: DocuSign Impersonation (PDF) linking to New Domain <=3d
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: EML file with IPFS links
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML smuggling - QR Code with suspicious links
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: PDF with link to DMG file download
calendar
Apr 25, 2024
·
Malfam: MetaStealer
·
Share on:
twitter
facebook
linkedin
copy
Attachment: PDF with link to zip containing a wsf file
calendar
Apr 25, 2024
·
Malfam: QakBot
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Chase bank with credential phishing indicators
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Exodus
calendar
Apr 25, 2024
·
Cryptocurrency
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft fake sign-in alert
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Silicon Valley Bank
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Callback Phishing: Branded invoice from sender/reply-to domain less than 30 days old
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential phishing link (unknown sender)
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Free subdomain link with credential theft indicators
calendar
Apr 25, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Free subdomain link with login or captcha (untrusted sender)
calendar
Apr 25, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Google Accelerated Mobile Pages (AMP) abuse
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link to auto-downloaded disk image in encrypted zip
calendar
Apr 25, 2024
·
Malfam: QakBot
·
Share on:
twitter
facebook
linkedin
copy
Link to auto-downloaded DMG in archive
calendar
Apr 25, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Link to auto-downloaded DMG in encrypted zip
calendar
Apr 25, 2024
·
Malfam: MetaStealer
Malfam: AtomicStealer
·
Share on:
twitter
facebook
linkedin
copy
Link to auto-downloaded file with Adobe branding
calendar
Apr 25, 2024
·
Malfam: QakBot
·
Share on:
twitter
facebook
linkedin
copy
Link to auto-downloaded file with Google Drive branding
calendar
Apr 25, 2024
·
Malfam: QakBot
·
Share on:
twitter
facebook
linkedin
copy
Link: Credential Phishing link with Undisclosed Recipients
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: Flagged bit.ly link
calendar
Apr 25, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Link: Google Firebase Dynamic Link that Redirects to New Domain (<7 days old)
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: QR code in EML attachment with credential phishing indicators
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: QR code with phishing disposition in img or pdf
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Malware: Pikabot delivery via URL auto-download
calendar
Apr 25, 2024
·
Malfam: Pikabot
·
Share on:
twitter
facebook
linkedin
copy
New link domain (<=10d) from untrusted sender
calendar
Apr 25, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
New sender domain (<=10d) from untrusted sender
calendar
Apr 25, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Open Redirect (go2.aspx) leading to Microsoft credential phishing
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Spam: New link domain (<=10d) and emojis
calendar
Apr 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Display name and subject impersonation using recipient SLD (new sender)
calendar
Apr 24, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: YouTube
calendar
Apr 24, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft logo in HTML with fake quarantine release notification
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Any HTML file (unsolicited)
calendar
Apr 23, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Any HTML file (untrusted sender)
calendar
Apr 23, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML Attachment with Login Portal Indicators
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML smuggling with decimal encoding
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
BEC/Fraud: Generic Scam attempt to Undisclosed Receipients
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Blockchain[.]com
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Coinbase
calendar
Apr 23, 2024
·
Cryptocurrency
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Dashlane
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Dotloop
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Gusto
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Okta
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: PNC
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Spotify
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: USPS
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Vanta
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Venmo
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand spoof: Dropbox
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Business Email Compromise (BEC) attempt from unsolicited sender
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Callback Phishing via extensionless rfc822 attachment
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Callback phishing via Google Group abuse
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing via Dropbox comment abuse
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Display name impersonation using recipient SLD
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Fake message thread with a suspicious link and engaging language from an unknown sender
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
File sharing link with a suspicious subject
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Google Notification alert link from non-Google sender
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Image as content with a link to an open redirect (unsolicited)
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Impersonation using recipient domain (untrusted sender)
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: QR Code with suspicious language (untrusted sender)
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Ticketmaster
calendar
Apr 23, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
PenPal Scam
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
VIP impersonation with invoicing request
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
VIP impersonation with urgent request (untrusted sender)
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
X (Twitter) Impersonation with Credential Phishing motives
calendar
Apr 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: OLE external relationship containing file scheme link to IP address
calendar
Apr 12, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: OLE external relationship containing file scheme link to executable filetype
calendar
Apr 4, 2024
·
Attack surface reduction
PikaBot
DarkGate
·
Share on:
twitter
facebook
linkedin
copy
Brand Impersonation: Google (QR Code)
calendar
Apr 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: RFC822 containing suspicious file sharing language with links from untrusted sender
calendar
Apr 3, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: JavaScript file with suspicious base64-encoded executable
calendar
Apr 1, 2024
·
Share on:
twitter
facebook
linkedin
copy
Sharepoint file share with suspicious recipients pattern
calendar
Mar 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Mass campaign: Cross Site Scripting (XSS) attempt
calendar
Mar 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: DocX embedded Binary
calendar
Mar 26, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML smuggling with embedded base64-encoded executable
calendar
Mar 25, 2024
·
Share on:
twitter
facebook
linkedin
copy
Invoicera infrastructure abuse
calendar
Mar 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Microsoft logo or suspicious language with open redirect
calendar
Mar 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Archive containing HTML file with file scheme link
calendar
Mar 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Digital Ocean
calendar
Mar 4, 2024
·
Share on:
twitter
facebook
linkedin
copy
Open redirect: Google Web Light
calendar
Mar 1, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Archive with embedded EXE file
calendar
Feb 27, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: IPFS
calendar
Feb 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment with VBA macros from employee impersonation (unsolicited)
calendar
Feb 26, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: RTF with embedded content
calendar
Feb 26, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Adobe branded PDF file linking to a password-protected file from untrusted sender
calendar
Feb 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Brand impersonation: Fake fax
calendar
Feb 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Business Email Compromise (BEC) attempt with masked recipients and reply-to mismatch (unsolicited)
calendar
Feb 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Credential Phishing: Suspicious language, link, recipients and other indicators
calendar
Feb 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
CVE-2023-5631 - Roundcube Webmail XSS via crafted SVG
calendar
Feb 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
MalwareBazaar: Malicious attachment hash (trusted reporters)
calendar
Feb 23, 2024
·
Abusech: MalwareBazaar
·
Share on:
twitter
facebook
linkedin
copy
Russia return-path TLD (untrusted sender)
calendar
Feb 23, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Suspicious VBA macros from untrusted sender
calendar
Feb 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
URL with Unicode U+2044 (⁄) or U+2215 (∕) characters
calendar
Feb 23, 2024
·
Share on:
twitter
facebook
linkedin
copy
Link: CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability
calendar
Feb 15, 2024
·
CVE-2024-21413
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Office document loads remote document template
calendar
Feb 12, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Office file with suspicious function calls or downloaded file path
calendar
Feb 9, 2024
·
Attack surface reduction
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML with obfuscation and recipient's email in JavaScript strings
calendar
Feb 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: Python generated PDF with link
calendar
Feb 7, 2024
·
Share on:
twitter
facebook
linkedin
copy
Attachment: HTML file contains exclusively Javascript
calendar
Feb 1, 2024
·
Share on:
twitter
facebook
linkedin
copy