Select Page

2FA Phishing

by | Apr 22, 2024 | Phish collection

Today’s authentication state of the art uses two of a few possible factors identify us. We call this Two-factor authentication (2FA). The possible factors include: Something you know – for example, a password. Something you have – maybe a cell phone...

ICANN “Verify Your Contact Info” Phishing

by | Mar 14, 2024 | Phish collection

ICANN – the Internet Corporation for Assigned Names and Numbers – keeps a registry of names and contact information for every internet domain name. ICANN periodically sends reminder emails like this one, and everyone who operates a website has seen them....

More Elite Phishing

by | Jan 16, 2024 | Phish collection

It’s a time-honored tradition to reserve the first spots on the year’s Greg Sustaining Membership roster for truly exceptional Patriots, and this year, I chose YOU. That’s right. I’m pleased to invite YOU to be one of the very first people to become a 2024...

Salary Update phishing

by | Sep 20, 2023 | Phish collection

Ah, yes, the old click-here-for-your-salary-history scam. Who wouldn’t want a helpful link from their company with salary history details? Click here to open the spreadsheet, click through the macro warnings, and enjoy the payload it leaves inside your computer....

Namecheap Phishing – Certificate Expiring?

by | Jul 28, 2023 | Phish collection

This phishing attack impersonates domain registrar, Namecheap, and might be the best I’ve seen. It grabbed my attention because I’ve fought expired certificates before and they’re always a major hassle to deal with. But wait a minute. Namecheap is my...