A request sent from a real government email domain passed SPF, DKIM and DMARC and led Revolut to release passports and Bitcoin records. Here is what failed.
Read more: Revolut Data Leak: Fake Government Request Passed DMARC
A malicious Google Ad leads to a real chatgpt.com link, where a fake "Codex" install command hides a base64 payload that drops the MacSync infostealer. Here's the full chain.
Read more: How a Real ChatGPT Link Delivers Phishing via a Fake Codex Install
A fake Ledger app bypassed Apple’s App Store review last week. Discovered by PhishFort, this phishing scam shows how fake crypto apps steal funds — and how to avoid them.
Read more: Ledger Scam (April 17): $9.5M Stolen via Fake App — Flagged and Taken Down by PhishFort Analyst
Open source supply chain attacks are targeting developers and maintainers to compromise downstream applications. Learn how these attacks work and how to protect your code.
Read more: Open Source Supply Chain Attack: Why Developers Are the New Target
Stop falling for the latest MEV arbitrage scam. Learn how AI-driven social engineering drains DeFi wallets and how to protect your assets today.
Read more: 7 Signs of an MEV Arbitrage Scam: Protect Your DeFi Wallet Now
Navigating the job market in the Web3 and blockchain space has become a digital minefield. Learn how threat actors use fake recruitment agencies to deliver malware.
Read more: Why You Need a List of Fake Recruitment Agencies: Lessons from a Web3 Malware Attack
The rise of digital asset theft has birthed a secondary, equally predatory industry: the crypto asset recovery scam. Learn how to identify legitimate recovery companies and avoid falling victim twice.
Read more: Crypto Asset Recovery: How to Identify Legitimate Companies vs. Scams
In the high-stakes ecosystem of Web3 and venture capital, understanding social engineering is crucial as meeting requests become routine.
Read more: Social Engineering: The 'Can You Hear Me?' Trap Explained
Digital risk protection is essential for organizations facing AI-driven threats in 2026. Explore key cybersecurity trends and recommended actions to reduce external risk.
Read more: Digital Risk Protection in 2026: Key Cybersecurity Trends and Recommended Actions
Learn the effective domain takedown strategy for all abuse scenarios: from brand squatting to active phishing. Understand registrar reluctance, the role of domain age, and how to approach DNS abuse mitigation for new versus compromised sites.
Read more: Compromised Site Takedown Strategy | PhishFort
How to avoid holiday scams by learning real examples of phishing emails, fake delivery messages, and fraudulent holiday deals used by scammers.
Read more: How to Avoid Holiday Scams: 5 Powerful Examples That Expose Seasonal Fraud
Digital threat protection helps organizations detect, monitor, and disrupt phishing, impersonation, and domain abuse targeting users and brands.
Read more: Digital Threat Protection: Securing Brands, Users, and Infrastructure Against Modern Attacks
Learn how phishing takedowns work — from detection to domain suspension
Read more: Phishing Takedown Process Explained | PhishFort