A request sent from a real government email domain passed SPF, DKIM and DMARC and led Revolut to release passports and Bitcoin records. Here is what failed.
Read more: Revolut Data Leak: Fake Government Request Passed DMARC
Attackers accessed DNI images and selfies from TuLotero's KYC service in July 2026. What is confirmed, what is claimed, and how operators stop the phishing that follows.
Read more: TuLotero KYC Breach: How Stolen IDs Fuel Gambling Phishing
A breach at DriveWealth, Revolut's US stock trading partner, exposed historical customer data. What happened, who is affected and how breach notices become phishing lures.
Read more: DriveWealth Breach: What Revolut Users Need to Know
A request sent from a real government email domain passed SPF, DKIM and DMARC and led Revolut to release passports and Bitcoin records. Here is what failed.
Read more: Revolut Data Leak: Fake Government Request Passed DMARC
A Steam Workshop map for MECCHA CHAMELEON dropped a RAT on players' PCs and led to a hijacked official Discord: what happened and what to check now.
Read more: MECCHA CHAMELEON Malware: Workshop Map to Discord Takeover
How online casinos detect account takeover: credential stuffing, deposit fraud signals, and the response steps that stop withdrawals before they clear.
Read more: Account Takeover in Online Casinos
Coordinated bonus abuse rings exploit iGaming promotions through shared infrastructure and scripted behavior. Learn how fraud teams detect and stop them.
Read more: Bonus Abuse in iGaming: Detecting Coordinated Rings