Roman Dedenok

This phishing campaign incorporates ghost spoofing, embedded text in images, a PDF file, a QR code, DocuSign imitation, and Cloudflare verification — yet it still completely misses the mark.

An Office 365 security alert as bait in a phishing email.

A simple technology that significantly improves email protection.

Cybercriminals prey on corporate credentials by sending phishing links through Dropbox after priming the victim.

Cybercriminals prey on access to mailing tools by sending phishing emails through these same tools.

Methods used by attackers to redirect victims to malicious and phishing sites from seemingly safe URLs.

Examples of how QR codes in emails are used for phishing.

Attackers invite employees to complete fake self-evaluations to steal corporate credentials.

How did scammers pull off a MitM attack and 2FA bypass in… 1915?!

Cybercriminals prey on corporate credentials by sending fake HR emails.

Cybercriminals can access the e-mails of folks you’re in correspondence with and then try to hijack your conversations.

Korean filmmakers have made a film about cybercrime that deserves a look — if only as a training tool.

Cybercriminals are sending to companies high-quality imitations of business letters with a spy trojan in the attachment.

Work e-mails stamped “verified” should set alarm bells ringing.

How cybercriminals extract bank card details pretending to be DHL.

Here’s how phishers extract phone numbers and credentials from users of Wise.

We explain how scammers steal cryptowallets through phishing.

We explain how phishers are swindling Wells Fargo customers out of personal credentials, passwords, card details, and selfies with an ID card.

What is a seed phrase, how scammers use it to steal cryptowallets, and how to protect your MetaMask account.

We reveal more cunning cybercriminal tricks and explain how to guard against scams.

Anti-phishing lessons: what company employees should know about fake notifications about account security.