Good morning, readers! While poking around in inboxes and spam folders, I managed to dig up an interesting crypto wallet drainer that makes some interesting use of infrastructure. Grab a coffee, sit back, and let's take a look at this phish and how it leverages basic redirection tactics,
Hello all! I know it’s been a while since my last post—life has been busy. That said, I recently observed a trend across several inboxes involving phishing links sent from compromised WordPress sites. While the phishing scheme itself wasn’t particularly notable, the use of Blogspot/Blogger stood
During my routine checks for interesting spam to take a look at, I noticed that there was a continual theme in an inbox to either receive a crypto airdrop or stake with Lido. In typical fashion, I wanted to dissect this campaign a bit and highlight how this campaign works.
A few days ago, I published an article about a recent Mailgun phishing campaign. Naturally, I received several additional phishing emails attempting to steal Mailgun credentials. In this post, we will take a deep dive into the recent Mailgun phishing emails I received after my last post. Initial Email Analysis
Good morning, everyone! As always, it's been a while since my last post. I have been receiving a persistent phishing email that appears to be from Mailgun. While I initially didn't pay much attention to it, the frequency of these emails made me take a closer
During routine monitoring of my emails, I noticed an interesting spam email posing to be the usual Microsoft O365 style phish. In this instance, the pretext was that we had an invoice and needed to sign in to view it. The more interesting part is how some of the technical side of the phish worked.
Good day, readers! It's been a while since my last post. A lot of this is due to me working diligently on my vulnerability API, called KEVin. You can learn more about that project at https://kevin.gtfkd.com. In this post, we're going to take