Stay informed with our latest blog posts.
PhishFort's new Dark Web Monitoring module provides corporate domain visibility into leaked credentials, corporate email exposures, and early indicators of compromise across underground channels.
Read more: Dark Web Monitoring — Release Notes
At PhishFort, security is embedded in everything we do. We're proud to announce our SOC 2 Type II attestation for soc compliance.
Read more: SOC 2 Type II Attestation Secured: PhishFort's Continued Dedication to Security
Discover PhishFort’s biggest achievements in 2019, from Binance Labs investment to new anti-phishing tools and TITAN 2.0. See how PhishFort continues fighting online threats.
Read more: PhishFort 2019 In Review: Building Stronger Phishing Protection Solutions
PhishFort and Fortmatic team up to protect Web3 dApps from phishing attacks. Learn how this partnership enhances crypto security, user trust, and safe authentication for decentralized apps.
Read more: Fortmatic and PhishFort Team Up!
PhishFort and Binance Labs join forces to make crypto safer. Discover how this investment strengthens phishing protection, innovation, and user trust across the global crypto ecosystem.
Read more: PhishFort Teams Up With Binance Labs
PhishFort partners with Paxful, the world's second-largest peer-to-peer Bitcoin marketplace, to enhance cryptocurrency phishing protection and safeguard millions of users worldwide.
Read more: PhishFort Paxful Partnership: to Strengthen Cryptocurrency Phishing Protection
UAC-0099 is hijacking trusted apps like Notepad++ and WinRAR through malicious plugins and DLL sideloading. Here's the full infection chain, based on CERT-UA's technical advisory.
Read more: UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver Malware
Days after the Coldcard entropy vulnerability went public, a phishing campaign impersonating Coinkite began tricking users into installing remote access malware disguised as a hardware audit tool.
Read more: From Exploit to Phishing: How Attackers Weaponized the Coldcard Entropy Incident
Gift card and crypto scams work because attackers borrow someone else's identity: a celebrity, an investment manager, even a loved one's voice. Here's how the impersonation angle actually plays out.
Read more: How Impersonation Fuels Gift Card and Crypto Scams
A malicious Google Ad leads to a real chatgpt.com link, where a fake "Codex" install command hides a base64 payload that drops the MacSync infostealer. Here's the full chain.
Read more: How a Real ChatGPT Link Delivers Phishing via a Fake Codex Install
Scam-style extortion is rising: attackers post fake data breach claims on leak sites with no real intrusion. Here's how the bluff works and how to verify before you panic.
Read more: Fake Data Breach Claims: Why Scam-Style Extortion Is Surging in 2026
The Vatican's Click to Pray app leaked the personal data of 700,000 users for over six months through a basic IDOR flaw. Here's how sequential user IDs and zero auth checks did the damage.
Read more: Click to Pray Exposes 700k Users: Inside a Textbook IDOR Failure