Threat Intel

Stay up to date with the latest research and threat intelligence reports.

A computer from the 1990s

We opened a fake invoice and fell down a retro XWorm-shaped wormhole

Pieter Arntz
November 13, 2025
0 Comments

In 2025, receiving a .vbs “invoice” is like finding a floppy disk in your mailbox. It's retro, suspicious, and definitely not something you should run.

ugly phishing attempt

How credentials get stolen in seconds, even with a script-kiddie-level phish

Pieter Arntz
November 11, 2025
0 Comments

Even a sloppy, low-skill phish can wreck your day. We go under the hood of this basic credential-harvesting campaign.

Home Depot logo

Home Depot Halloween phish gives users a fright, not a freebie

Pieter Arntz
October 22, 2025
0 Comments

Boo! A Home Depot Halloween “giveaway” isn’t a treat—it’s a phishing trick. Fake links, tracking pixels, and compromised sites are the real prizes.

indie gamer

“Can you test my game?” Fake itch.io pages spread hidden malware to gamers

Stefan Dasic
October 8, 2025
0 Comments

One click, total mess. A convincing itch-style page can drop a stealthy stager instead of a game. Here’s how to spot it and what to do if you clicked.

phishy recipe

New SVG-based phishing campaign is a recipe for disaster

Pieter Arntz
September 25, 2025
0 Comments

Another phishing campaign using SVG files to trick targets. This delicious-looking recipe turns out to hide malicious code.

24/7 Tech Support Scam

Scammers hijack websites of Bank of America, Netflix, Microsoft, and more to insert fake phone number

Pieter Arntz
June 18, 2025
0 Comments

Scammers are abusing sponsored search results, displaying their scammy phone number on legitimate brand websites.

Social security card and statement

Fake Social Security Statement emails trick users into installing remote tool

Pieter Arntz
April 30, 2025
0 Comments

Fake emails pretending to come from the US Social Security Administration try to get targets to install ScreenConnect for remote access.

DeepSeek Logo

DeepSeek users targeted with fake sponsored Google ads that deliver malware

Pieter Arntz
March 26, 2025
0 Comments

With its growing popularity, sponsored Google search ads have started impersonating DeepSeek AI.

Fake Microsoft Teams for Mac delivers Atomic Stealer

Jérôme Segura
July 12, 2024
0 Comments

In a new malware campaign, threat actors are using Google ads to target Mac users looking to download Microsoft Teams.

Contributors icon

Contributors

Threat Center icon

Threat Center

Podcasts icon

Podcast

Glossary icon

Glossary

Scams icon

Scams