Account Takeover in Online Casinos
How online casinos detect account takeover: credential stuffing, deposit fraud signals, and the response steps that stop withdrawals before they clear.
Read more: Account Takeover in Online CasinosPhishFort Blog
Our Research and Announcements
Stay informed with our latest blog posts.
Bonus Abuse in iGaming: Detecting Coordinated Rings
Coordinated bonus abuse rings exploit iGaming promotions through shared infrastructure and scripted behavior. Learn how fraud teams detect and stop them.
Read more: Bonus Abuse in iGaming: Detecting Coordinated Rings
Affiliate Fraud in iGaming: Detection and Prevention Guide
Affiliate fraud in iGaming takes three forms: domain typosquatting, brand bidding, and fake traffic. Detection signals and enforcement options for each.
Read more: Affiliate Fraud in iGaming: Detection and Prevention Guide
The Hotel Wi-Fi Trap: How Russian Spies are Weaponizing Captive Portals (And Why You Should Stick to 5G)
APT29's CaptiveCrunch campaign hijacks hotel Wi-Fi captive portals to deliver the CornFlake RAT and steal MFA-protected credentials. Here's how it works and the one fix that actually stops it.
Read more: The Hotel Wi-Fi Trap: How Russian Spies are Weaponizing Captive Portals (And Why You Should Stick to 5G)
AliExpress Is Using Silent WebAudio to Fingerprint Your Browser
A Bluetooth glitch led to an unexpected discovery: AliExpress runs silent WebAudio processing as part of a browser fingerprinting anti-fraud system. Here's what was found and what it means for security and privacy.
Read more: AliExpress Is Using Silent WebAudio to Fingerprint Your Browser
Fake Paws, Real Scams: How to Spot and Avoid Online Puppy Scams
Online puppy scams use stolen photos, fake breeders, and endless "fees" to steal your money and break your heart. Here's exactly how the trap is set and the one rule that protects you.
Read more: Fake Paws, Real Scams: How to Spot and Avoid Online Puppy Scams
UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver Malware
UAC-0099 is hijacking trusted apps like Notepad++ and WinRAR through malicious plugins and DLL sideloading. Here's the full infection chain, based on CERT-UA's technical advisory.
Read more: UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver MalwareBlog
Latest posts
Phishing Attacks: 10 Powerful Ways to Spot them in Crypto -and Stay Safe Online
Learn how to spot phishing attacks in crypto and protect your digital assets. Discover real examples, expert tips, and tools like PhishFort Nighthawk to keep your crypto safe.
Read more: Phishing Attacks: 10 Powerful Ways to Spot them in Crypto -and Stay Safe Online
PhishFort Paxful Partnership: to Strengthen Cryptocurrency Phishing Protection
PhishFort partners with Paxful, the world's second-largest peer-to-peer Bitcoin marketplace, to enhance cryptocurrency phishing protection and safeguard millions of users worldwide.
Read more: PhishFort Paxful Partnership: to Strengthen Cryptocurrency Phishing Protection
Binance Phishing Kits: A Tale of Two Phishes
Analysis of two distinct phishing kits targeting Binance users, demonstrating the evolution from basic credential harvesting to sophisticated multi-stage attacks.
Read more: Binance Phishing Kits: A Tale of Two Phishes
Free Browser Extension to Fight Cryptocurrency Phishing: PhishFort Nighthawk (2025 Update)
PhishFort Nighthawk is a free browser extension designed to fight cryptocurrency phishing in real time. Protect your crypto assets today with PhishFort’s Nighthawk Chrome Extension.
Read more: Free Browser Extension to Fight Cryptocurrency Phishing: PhishFort Nighthawk (2025 Update)
Spot Crypto Phishing Attacks | Essential Security Tips
Spot and prevent crypto phishing scams — stay ahead of cybercriminals with expert security advice.
Read more: Spot Crypto Phishing Attacks | Essential Security Tips
Report Phishing Scams Faster with Telegram
We're excited to release the latest addition to our family of anti-phishing tools for the cryptocurrency industry.
Read more: Report Phishing Scams Faster with Telegram