Collaborate Disseminate
The OAuth 2.0 Device Authorization Grant specification was designed to streamline authentication for Smart TVs, IoT devices, and printers. Today, threat actors are weaponizing it. Continue reading When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website
The OAuth 2.0 Device Authorization Grant specification was designed to streamline authentication for Smart TVs, IoT devices, and printers. Today, threat actors are weaponizing it. Continue reading When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website
Common email phishing tactics in 2025 include PDF attachments with QR codes, password-protected PDF documents, calendar phishing, and advanced websites that validate email addresses. Continue reading The evolving landscape of email phishing attacks: how threat actors are reusing and refining established techniques
Attackers are increasingly sending phishing emails with SVG attachments that contain embedded HTML pages or JavaScript code. Continue reading Phishing attacks leveraging HTML code inside SVG files
Kaspersky experts have discovered a new scheme that combines elements of spear and mass phishing Continue reading When spear phishing met mass phishing
Scammers are camouflaging phishing links with QR codes and distributing them through email. Continue reading QR codes in email phishing
Attackers put phishing HTML files in IPFS thus cutting back on web hosting costs. IPFS is used in both mass phishing and targeted (spearphishing) campaigns. Continue reading How scammers employ IPFS for email phishing
Text-based fraud (419 scams, vishing, extortion, etc.) is still alive and well. Here, we describe cybercriminal techniques and present statistics. Continue reading Text-based fraud: from 419 scams to vishing
In this article we review phishing HTML attachments, explaining common tricks the attackers use, and give statistics on HTML attachments detected by Kaspersky solutions. Continue reading HTML attachments in phishing e-mails
This article analyzes different ways of the spoofing email addresses through changing the From header, which provides information about the sender’s name and address. Continue reading Email spoofing: how attackers impersonate legitimate senders