Stay informed with our latest blog posts.
APT29's CaptiveCrunch campaign hijacks hotel Wi-Fi captive portals to deliver the CornFlake RAT and steal MFA-protected credentials. Here's how it works and the one fix that actually stops it.
Read more: The Hotel Wi-Fi Trap: How Russian Spies are Weaponizing Captive Portals (And Why You Should Stick to 5G)
A Bluetooth glitch led to an unexpected discovery: AliExpress runs silent WebAudio processing as part of a browser fingerprinting anti-fraud system. Here's what was found and what it means for security and privacy.
Read more: AliExpress Is Using Silent WebAudio to Fingerprint Your Browser
Online puppy scams use stolen photos, fake breeders, and endless "fees" to steal your money and break your heart. Here's exactly how the trap is set and the one rule that protects you.
Read more: Fake Paws, Real Scams: How to Spot and Avoid Online Puppy Scams
UAC-0099 is hijacking trusted apps like Notepad++ and WinRAR through malicious plugins and DLL sideloading. Here's the full infection chain, based on CERT-UA's technical advisory.
Read more: UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver Malware
Days after the Coldcard entropy vulnerability went public, a phishing campaign impersonating Coinkite began tricking users into installing remote access malware disguised as a hardware audit tool.
Read more: From Exploit to Phishing: How Attackers Weaponized the Coldcard Entropy Incident
Gift card and crypto scams work because attackers borrow someone else's identity: a celebrity, an investment manager, even a loved one's voice. Here's how the impersonation angle actually plays out.
Read more: How Impersonation Fuels Gift Card and Crypto Scams
A malicious Google Ad leads to a real chatgpt.com link, where a fake "Codex" install command hides a base64 payload that drops the MacSync infostealer. Here's the full chain.
Read more: How a Real ChatGPT Link Delivers Phishing via a Fake Codex Install
Protect your business with advanced brand abuse tools — detect, track, and eliminate impersonation threats.
Read more: Best Brand Abuse Tools | Protect Your Digital AssetsAnalysis of two distinct phishing kits targeting Binance users, demonstrating the evolution from basic credential harvesting to sophisticated multi-stage attacks.
Read more: Binance Phishing Kits: A Tale of Two Phishes
PhishFort Nighthawk is a free browser extension designed to fight cryptocurrency phishing in real time. Protect your crypto assets today with PhishFort’s Nighthawk Chrome Extension.
Read more: Free Browser Extension to Fight Cryptocurrency Phishing: PhishFort Nighthawk (2025 Update)
Spot and prevent crypto phishing scams — stay ahead of cybercriminals with expert security advice.
Read more: Spot Crypto Phishing Attacks | Essential Security Tips
We're excited to release the latest addition to our family of anti-phishing tools for the cryptocurrency industry.
Read more: Report Phishing Scams Faster with Telegram
Our early warning systems recently detected a spike in Binance related attacks.
Read more: Binance Scam: Free Giveaway Analysis