Account Takeover in Online Casinos
How online casinos detect account takeover: credential stuffing, deposit fraud signals, and the response steps that stop withdrawals before they clear.
Read more: Account Takeover in Online CasinosPhishFort Blog
Our Research and Announcements
Stay informed with our latest blog posts.
Bonus Abuse in iGaming: Detecting Coordinated Rings
Coordinated bonus abuse rings exploit iGaming promotions through shared infrastructure and scripted behavior. Learn how fraud teams detect and stop them.
Read more: Bonus Abuse in iGaming: Detecting Coordinated Rings
Affiliate Fraud in iGaming: Detection and Prevention Guide
Affiliate fraud in iGaming takes three forms: domain typosquatting, brand bidding, and fake traffic. Detection signals and enforcement options for each.
Read more: Affiliate Fraud in iGaming: Detection and Prevention Guide
The Hotel Wi-Fi Trap: How Russian Spies are Weaponizing Captive Portals (And Why You Should Stick to 5G)
APT29's CaptiveCrunch campaign hijacks hotel Wi-Fi captive portals to deliver the CornFlake RAT and steal MFA-protected credentials. Here's how it works and the one fix that actually stops it.
Read more: The Hotel Wi-Fi Trap: How Russian Spies are Weaponizing Captive Portals (And Why You Should Stick to 5G)
AliExpress Is Using Silent WebAudio to Fingerprint Your Browser
A Bluetooth glitch led to an unexpected discovery: AliExpress runs silent WebAudio processing as part of a browser fingerprinting anti-fraud system. Here's what was found and what it means for security and privacy.
Read more: AliExpress Is Using Silent WebAudio to Fingerprint Your Browser
Fake Paws, Real Scams: How to Spot and Avoid Online Puppy Scams
Online puppy scams use stolen photos, fake breeders, and endless "fees" to steal your money and break your heart. Here's exactly how the trap is set and the one rule that protects you.
Read more: Fake Paws, Real Scams: How to Spot and Avoid Online Puppy Scams
UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver Malware
UAC-0099 is hijacking trusted apps like Notepad++ and WinRAR through malicious plugins and DLL sideloading. Here's the full infection chain, based on CERT-UA's technical advisory.
Read more: UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver MalwareBlog
Latest posts
Multi-Accounting Detection: Stopping Gnoming and Chip-Dumping
How multi-accounting detection works for chip dumping in poker, gnoming, and iGaming fraud, and how platforms actually catch coordinated account schemes.
Read more: Multi-Accounting Detection: Stopping Gnoming and Chip-Dumping
Gaming Fraud Prevention: How It Differs From iGaming Across Platforms
Gaming fraud prevention goes beyond iGaming: in-game currency abuse, account trading, and esports match-fixing all need a different detection approach. Here's how they compare.
Read more: Gaming Fraud Prevention: How It Differs From iGaming Across Platforms
iGaming Fraud Prevention: Detection, Enforcement, and What Actually Works
iGaming operators face fraud that standard payment tools aren't built to handle. This guide covers how detection, takedowns, and enforcement actually work and what to look for in a solution.
Read more: iGaming Fraud Prevention: Detection, Enforcement, and What Actually Works
Shai-Hulud Returns: The npm Supply Chain Worm Turning Stolen Credentials Into New Infections
A self-propagating npm supply chain attack compromised keyv and 444+ packages with 2B+ monthly installs. Here's how Shai-Hulud works, why provenance checks aren't enough, and what security teams should do now.
Read more: Shai-Hulud Returns: The npm Supply Chain Worm Turning Stolen Credentials Into New Infections
The Anatomy of Brand Attacks in the First Half of 2026
Seven shifts in phishing and brand impersonation tracked in real time across the first half of 2026, benchmarked against the industry's leading threat research.
Read more: The Anatomy of Brand Attacks in the First Half of 2026
Digital Risk Protection Services & Tools: The Complete 2026 Guide
What digital risk protection (DRPS) services and tools actually do, how they work, real use cases with results, and how to choose the right provider.
Read more: Digital Risk Protection Services & Tools: The Complete 2026 Guide