emailHow to stop exploitation of CVE-2024-49040
The patch that fixes CVE-2024-49040 in Microsoft Exchange is temporarily unavailable. We’ve implemented heuristics that detect attempts to exploit it.
Roman Dedenok
Spam Analysis Expert
47 articles
Overcooking the phish
This phishing campaign incorporates ghost spoofing, embedded text in images, a PDF file, a QR code, DocuSign imitation, and Cloudflare verification — yet it still completely misses the mark.
Honest phishing: the alert is fake, the attack is real
An Office 365 security alert as bait in a phishing email.
products
Two-stage Dropbox spear phishing
Cybercriminals prey on corporate credentials by sending phishing links through Dropbox after priming the victim.
Recursive credential phishing for ESPs
Cybercriminals prey on access to mailing tools by sending phishing emails through these same tools.
e-mailHow cybercriminals disguise URLs
Methods used by attackers to redirect victims to malicious and phishing sites from seemingly safe URLs.
Received an email with a QR code? Watch out!
Examples of how QR codes in emails are used for phishing.
Self-evaluation questionnaire phishing scam
Attackers invite employees to complete fake self-evaluations to steal corporate credentials.
identity theft
Conversation hijacking and how to deal with it
Cybercriminals can access the e-mails of folks you’re in correspondence with and then try to hijack your conversations.
movies“On the Line”: a movie about vishing
Korean filmmakers have made a film about cybercrime that deserves a look — if only as a training tool.
Trojan-stealer discovered in spam mailouts to businesses
Cybercriminals are sending to companies high-quality imitations of business letters with a spy trojan in the attachment.
“Package for you. Please scan the QR code”
How cybercriminals extract bank card details pretending to be DHL.
Phishing for Wise guys
Here’s how phishers extract phone numbers and credentials from users of Wise.
Cryptoscam giveaway: phishers go after seed phrases
We explain how scammers steal cryptowallets through phishing.
Bank phishing and identity theft
We explain how phishers are swindling Wells Fargo customers out of personal credentials, passwords, card details, and selfies with an ID card.
Scammers eye MetaMask: how can you stay safe?
What is a seed phrase, how scammers use it to steal cryptowallets, and how to protect your MetaMask account.
8 more tips for spotting online scammers
We reveal more cunning cybercriminal tricks and explain how to guard against scams.