PhishingMalwareAttackers Weaponize Signed RMM Tools via Zoom, Meet, & Teams LuresFebruary 12, 2026·3 min read
PhishingCloudMalicious Bing Ads Lead to Widespread Azure Tech Support ScamsFebruary 5, 2026·2 min read
PhishingCredential TheftGlitch-hosted Phishing Uses Telegram & Fake CAPTCHAs to Target Navy Federal Credit Union CustomersJune 2, 2025·4 min read
MalwarePhishingPureHVNC RAT Using Fake High-level Job Offers from Fashion and Beauty BrandsMay 28, 2025·7 min read
PhishingFake CAPTCHAs, Malicious PDFs, SEO Traps Leveraged for User Manual SearchesFebruary 27, 2025·3 min read
PhishingCredential TheftNew Phishing Campaign Abuses Webflow, SEO, and Fake CAPTCHAsFebruary 12, 2025·3 min read
Phishing CryptoAttackers Target Crypto Wallets Using Codeless Webflow Phishing PagesOctober 23, 2024·4 min read
PhishingCredential TheftPhishing in Style: Microsoft Sway Abused to Deliver Quishing AttacksAugust 27, 2024·5 min read
PhishingCredential TheftPhishing with Cloudflare Workers: Transparent Phishing and HTML SmugglingMay 23, 2024·6 min read
RansomwarePhishingNetskope Threat Coverage: Microsoft Quick Assist Ransomware AttacksMay 21, 2024·1 min read
CloudPhishingCloud Threats Memo: Multiple Legitimate Cloud Storage Services Exploited to Target Israeli OrganizationsApril 2, 2024·3 min read
MalwarePhishingCloud Threats Memo: Google Drive Abused to Target Organizations in Asian CountriesMarch 6, 2024·2 min read
MalwarePhishingThreat Actors Distributing Screenshotter Malware from OneDriveJanuary 26, 2024·2 min read
MalwarePhishingA Look at the Nim-based Campaign Using Microsoft Word Docs to Impersonate the Nepali GovernmentDecember 20, 2023·6 min read
PhishingCloudAmazon-themed PDF Phishing, Abusing LinkedIn and Twitter, Targets Microsoft Live Outlook UsersOctober 26, 2023·4 min read
PhishingCredential TheftEvasive Phishing Campaign Steals Cloud Credentials Using Cloudflare R2 and TurnstileAugust 14, 2023·5 min read
VulnerabilityPhishingMitigating the Latest Microsoft Teams Vulnerability with NetskopeJuly 24, 2023·3 min read
VulnerabilityPhishingNetskope Threat Coverage: Microsoft Office and Windows Zero Day (CVE-2023-36884)July 20, 2023·1 min read
MalwarePhishingCloud Threats Memo: Another State-Sponsored Actor Exploiting DropboxJuly 17, 2023·2 min read
PhishingCredential TheftAWS Amplify Hosted Phishing Campaigns Abusing Telegram, Static FormsJuly 14, 2023·5 min read
PhishingCloud.Zip and .Mov Top Level Domain Abuse: One Month After Being Made PublicJune 12, 2023·5 min read
MalwarePhishingCloud Threats Memo: Threat Actors Continue to Exploit the Flexibility of GitHub for Malicious PurposesJune 5, 2023·3 min read
PhishingCredential TheftInterPlanetary File System: A Decentralized Place to Host Phishing ContentMay 16, 2023·6 min read
CloudMalwareCloud Threats Memo: Threat Actors Increasingly Exploiting Google DriveApril 21, 2023·3 min read
MalwareBotnetEmotet Comeback: New Campaign Using Binary Padding to Evade DetectionMarch 22, 2023·3 min read
PhishingSocial EngineeringAttackers Increasingly Abusing DigitalOcean to Host Scams and PhishingMarch 9, 2023·8 min read
EspionageRansomwareLessons Learned From a Year of Russo-Ukrainian CyberwarFebruary 24, 2023·3 min read
PhishingCloudCloud Threats Memo: Understanding the Growing Risk of Consent PhishingFebruary 2, 2023·3 min read
EspionageCloudCloud Threats Memo: State-sponsored Threat Actors Continue to Abuse Legitimate Cloud ServicesDecember 19, 2022·2 min read
MalwarePhishingCloud Threats Memo: Yet Another Cyber Espionage Campaign Exploiting Cloud ServicesNovember 30, 2022·2 min read
PhishingCloudCloud Abuse: New Technique Using Adobe Acrobat to Host PhishingNovember 16, 2022·3 min read
PhishingCredential TheftNew Phishing Technique Targeting Over 20 Crypto WalletsNovember 10, 2022·3 min read
PhishingCloudCloud Threats Memo: Exploiting Google Forms for Phishing CampaignsNovember 3, 2022·2 min read
PhishingCredential TheftAttackers Continue to Abuse Google Sites and Microsoft Azure to Host Cryptocurrency PhishingSeptember 15, 2022·6 min read
MalwareCloudCloud Threats Memo: Lampion Exploiting WeTransfer to Deliver MalwareSeptember 13, 2022·2 min read
PhishingCredential TheftAbusing Google Sites and Microsoft Azure for Crypto PhishingAugust 9, 2022·4 min read
PhishingCloudCloud Threats Memo: Cloud Storage Services are Increasingly Exploited to Deliver MalwareAugust 2, 2022·2 min read
PhishingCredential TheftNetskope Threat Coverage: Microsoft Discloses New Adversary-in-the-Middle (AiTM) Phishing AttackJuly 18, 2022·3 min read
CloudCredential TheftBreaking Down the 2022 Verizon Data Breach Investigations Report (DBIR)June 28, 2022·4 min read
Credential TheftCloudCloud Threats Memo: Analyzing the Top 10 Initial Access VectorsMay 19, 2022·3 min read
PhishingCredential TheftMulti-Factor Authentication (MFA) Bypass Through Man-in-the-Middle Phishing AttacksApril 14, 2022·4 min read
PhishingCredential TheftCloud Threats Memo: Protecting Yourself from Static Web App Phishing CampaignsApril 5, 2022·2 min read
MalwarePhishingOffice Documents and Cloud Apps: Perfect for Malware DeliveryMarch 22, 2022·5 min read
MalwarePhishingMicrosoft Office: VBA Blocked By Default in Files From the InternetFebruary 24, 2022·7 min read
PhishingCloudCloud Threats Memo: New Malicious Campaign Using GitHub for Command and ControlFebruary 2, 2022·2 min read
PhishingMalwareInfected PowerPoint Files Using Cloud Services to Deliver Multiple MalwareJanuary 24, 2022·7 min read
PhishingRansomwareCloud Threats Memo: Scary Examples of Weaponizing Google DriveNovember 18, 2021·3 min read
PhishingCloudCloud Threats Memo: Adding to the List of Exploited Cloud ServicesSeptember 28, 2021·2 min read
Phishing AuthNew Phishing Attacks Exploiting OAuth Authorization Flows (Part 3)August 12, 2021·8 min read
Phishing AuthNew Phishing Attacks Exploiting OAuth Authorization Flows (Part 2)August 10, 2021·7 min read
Phishing AuthNew Phishing Attacks Exploiting OAuth Authorization Flows (Part 1)August 10, 2021·5 min read
MalwarePhishingCloud Threats Memo: Hancitor Continues Exploiting DocuSign and Google Docs TemplatesJuly 15, 2021·1 min read
PhishingCloudCloud Threats Memo: Takeaways From the Q1 2021 Phishing Activity Trend ReportJune 15, 2021·2 min read
MalwarePhishingCloud Threats Memo: Malicious Campaigns Taking Advantage of Well-known Collaboration AppsApril 20, 2021·1 min read
PhishingMalwareCloud Threats Memo: LinkedIn Spearphishing and Malware-as-a-ServiceApril 13, 2021·1 min read
PhishingMalwareCloud Threats Memo: Dridex Phishing Posing as COVID-19 ReliefMarch 19, 2021·1 min read
MalwarePhishingCloud and Threat Report: Was 2020 the Year of the Malicious Office Document?March 16, 2021·3 min read
MalwarePhishingCloud Threats Memo: Protecting Against Hancitor Distributed Through Malicious Office DocumentsMarch 4, 2021·1 min read
PhishingCloudCloud Threats Memo: Surprising Findings from Q4 2020 Phishing Trends ReportFebruary 17, 2021·2 min read
MalwarePhishingYou Can Run, But You Can’t Hide: Detecting Malicious Office DocumentsOctober 8, 2020·7 min read
PhishingCredential TheftA Big Catch: Cloud Phishing from Google App Engine and Azure App ServiceAugust 12, 2020·4 min read
PhishingMalwarePhishing Attacks on Retail Industry Ramp Up as the Holiday Shopping Season ApproachesDecember 13, 2017·5 min read