🎯 Phishing

The items that name it 15

• Was I wrong about open models & cyber risks?
  articleas techniques2026-10-30

  Used as an example of a threat actor business process that does not change just because a critical CVE is published

• Passkeys Are Better Than Passwords. But They Are Not Enough.
  articleas techniques2026-10-30

  Named as a threat that passkeys resist because authentication is bound to the legitimate service.

• Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
  articleas techniques2026-10-30

  Among the criminal activities Virtualine promoted support for

• Trezor hardware implant report: CryptoBilis buyers urged to move funds
  articleas techniques2026-10-30

  Trezor warns scammers could exploit the incident with fake emails, physical letters and phone calls to obtain recovery phrases.

• IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
  articleas techniques2026-10-29It is written here as Phishing: leading initial access vector, 37 percent of Talos IR engagements in Q3 2026, down from over 50 percent the previous quarter.
• Managed for Malice: How Attackers Turn MDM into Remote Access
  writeupas classification.key entities2026-10-28
• Crypto wallet maker Keystone to destroy almost 19,000 devices after security breach
  articleas classification.key entities2026-10-27
• Keystone to destroy almost 19,000 wallets after device key leak
  articleas classification.key entities2026-10-26
• Security Awareness Training Isn’t Dead, but It Needs a Rethink
  articleas techniques2026-10-08

  Deceptive messages used to trick employees; traditional phishing kits now upgraded with AI

• Phishing Abuses RMM Tools for Persistent Access
  writeupas techniques2026-09-29It is written here as Phishing: Spearphishing Link.

  Workplace meeting, Zoom, Google Meet, invitation, RSVP, PDF, and Adobe-themed phishing emails containing links redirecting to malicious payload download locations.

• Update on Security at METR
  writeupas techniques2026-08-31

  Attackers attempted to phish METR staff in May 2026

• KUDANKULAM NUCLEAR POWER PLANT LEAK: AN ACCIDENTAL DISCLOSURE
  writeupas techniques2026-07-17

  Cited as a possible initial access vector for the breach and as the most common technique used by state-sponsored espionage operations (e.g., against ICS/OT)

• The Devil, Eight Million Emails, and a Whole Lot of Milk | Phishing Stager Exposed
  writeupas techniques2026-06-15

  Mass phishing campaign impersonating Boots (UK pharmacy chain) with a fake customer-satisfaction survey and free-gift lure, sent to over 8 million recipients via personalized merge-field tokens

• Deobfuscating Files for Flags: Huntress CTF 2025 Retro
  articleas techniques2025-11-06
• Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419) | depthfirst
  writeupas techniques2025-10-20

  Hyper-realistic phishing emails that pass SPF, DKIM and DMARC checks