bugs in your site

February 29, 2024

This is a new type of Phish where the person is offering up their services to help identify some vulnerabilities. They are hoping you will pay them for the information they give you. If not, they are counting on you feeling like they will exploit the vulnerabilities if you don’t pay. There are actually some […]


Thanks fọr pļacíng Ọrder (Geek Squad)

February 29, 2024

This phishing email uses a common tactic of impersonating a Geek Squad invoice for a considerable charge. The tactics employed are designed to trick the recipient into calling the provided help desk number and disclosing financial information to the scammers. This particular example contains suspicious characters in the heading. Below are the red flags: Suspicious […]


helpdesk helpdesk (Norton AV Scam)

February 27, 2024

This email attempts to deceive the user into believing that they have received a bill for a substantial amount of money for the renewal of Norton products. The objective of this email is to trick the recipient into calling the provided phone number and revealing personal and financial information to the scammers. Here are the […]


modification of direct deposit details

February 27, 2024

This is a common phishing email which impersonates a legitimate employee in an attempt to redirect direct deposit payments to the attacker. below are the red flags: Mismatch Email: The email does not match the name of the sender, and is sent from an external account. Request for Sensitive Action: The sender is attempting to […]


2024 CPE Provider List Information Verification

February 13, 2024

This phishing email is intended to impersonate the Texas Education Agency and direct users to a malicious link to harvest credentials. Below are the red flags: Sender’s Email Address: The email comes from an ‘icloud.com’ domain, which is unusual for official communication from an organization like the Texas Education Agency. Official emails would typically come […]


(ADVANCE) WARNING!!!

February 8, 2024

This phishing email is intended to redirect users to a Google form that will harvest their credentials and allow the attackers to bypass two factor authentication. This email is particularly dangerous because if successful, attackers will be able to gain network level access through the use of the stolen two factor authentication code. Below are […]


Apply Now

February 2, 2024

A quick browser search using the domain name iconpln.co.id and Red Cross shows a number of companies/universities reporting this phish. The Red Cross uses their own domain name for correspondence; their email address format is FirstName.LastName@redcross.org. Any email coming from the Red Cross would be using that format with redcross.org. The link points to arc-careers.com. […]