February 05, 2025

Scalable Vector Graphics files pose a novel phishing threat

The SVG file format can harbor malicious HTML, scripts, and malware

Threat Research

December 19, 2024

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar 

Security OperationsThreat Research

November 20, 2024

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

Security OperationsThreat Research

October 16, 2024

From QR to compromise: The growing “quishing” threat

Attackers leverage QR codes in PDF email attachments to spearphish corporate credentials from mobile devices

Threat Research

June 13, 2024

Phishing, BEC attackers target candidates in local election, among others

An escalating series of email-borne attacks were sent to candidates, including the author

Threat Research

August 14, 2023

Crimeware server used by NetWalker ransomware seized and shut down

The site was running from 2014 and allegedly raked in more than $20m, which the DOJ is seeking to claw back...

Naked Security

January 20, 2023

T-Mobile admits to 37,000,000 customer records stolen by “bad actor”

Once more, it's time for Shakespeare's words: Once more unto the breach...

Naked Security

December 21, 2022

“Suspicious login” scammers up their game – take care at Christmas

A picture is worth 1024 words - we clicked through so you don't have to.

Naked Security

November 21, 2022

How social media scammers buy time to steal your 2FA codes

The warning is hosted on a real Facebook page; the phishing uses HTTPS via a real Google server... but the content is all fake

Naked Security