Our enterprise recently dealt with what appeared to be an automated phishing campaign spreading through compromised Google Workspace accounts. The attackers used adversary-in-the-middle (AiTM) techniques to capture authentication…
Our enterprise recently dealt with a coordinated campaign in which attackers used adversary-in-the-middle (AiTM) phishing proxies to compromise accounts in legitimate Google Workspace tenants. Compromised mailboxes then appeared…
Has anyone else seen legitimate DocuSign messages trigger highly malicious link alerts in a GCC tenant? We are seeing this across many incoming messages, including mail sent through…
Has anyone else seen legitimate DocuSign messages trigger Microsoft Exchange or email-security alerts for highly malicious links, particularly in GCC environments? This appears to be happening broadly across…
I received a strange job invitation claiming to be from Bolt and investigated whether it was phishing. The message came from [email protected], and SPF, DKIM, and DMARC all…
I received a strange job invitation claiming to be from Bolt. It came from [email protected], and the email headers showed that SPF, DKIM, and DMARC passed. The Received…
I received an oddly formatted email claiming that I need to re-attest my network access for Microsoft's Smart Network Data Services (SNDS). The message passed SPF and DKIM,…
I received an unusually formatted email claiming that I need to re-attest our network access for Microsoft's Smart Network Data Services (SNDS). The message passed SPF and DKIM,…
Two users in our organization have been receiving more than 100 phishing, newsletter, and spam messages per day, often in different languages. The attack started about three weeks…
I need an expensive textbook for school, and a classmate sent me a PDF they got from someone else. I don't know where it originally came from. Could…
I need an expensive textbook for school, and a classmate sent me a PDF copy that they got from somewhere else. I don't know where it came from,…
For those who have handled business email compromise incidents, how was the attack detected? Did authentication or email-security tools flag unusual activity, or did the messages and sign-ins…
Someone keeps sending Instagram two-factor authentication codes to my phone number, even though I'm not trying to log in. I already have two-factor authentication enabled on my account,…
We've received a dozen verification-code emails for current and former employees, and I also received one at a personal address. The messages appear to be legitimate TikTok Shop…
We've received around a dozen TikTok Shop account verification emails sent to current and former employees, and I also received one at a personal address. The messages appear…
I meant to type youtube.com but accidentally entered yoyutube.com. The site loaded a dark page with a large blue-gray box and a message roughly saying, "We're preparing your…
Our company is being impersonated in a mass-email campaign. Several businesses—some existing clients and some we have never worked with—have received messages claiming to be from us and…
Our company is being impersonated in mass emails sent to various businesses, including some of our actual clients. The messages falsely claim that the recipient is violating licensing…
I meant to type youtube.com but accidentally entered yoyutube.com and was redirected to a page with a dark background and a large blue-gray box saying something like "We're…
An article about phishing kits that use browser-in-the-browser techniques and attempt to register rogue passkeys got me thinking about our defenses. We pushed for restricting access to managed…