Tag: phishing

All the articles with the tag "phishing".

• The Account That Cried VPN

  1 Sep, 2026

  A phishing alert led to a compromised account, tampered refund settings, and five months of VPN and onion-routing noise that turned out to be the user's own. How the pieces came apart, and why the MFA fallback was the weak link.

• The Party Invite That Wasn't: Anatomy of a ScreenConnect Phishing Campaign

  12 Aug, 2026

  A fake e-vite, a compromised sender you actually trust, and a remote access tool that never should have been installed. Six devices, one campaign, and the logical inconsistency that gave it away.

• Sinkhole, Bursts, and a 142-Minute Retry Timer: Reading C2 Behavior in the Logs

  14 Apr, 2026

  A phishing click led to fixed-size C2 check-ins arriving in two distinct bursts with a 142-minute gap between them. The pattern told the story before we had a verdict.

• Anatomy of a Crypto Drainer: Phishing, a 22MB Payload, and 180 Identical Beacons

  13 Apr, 2026

  A user clicked through a phishing warning and ended up with what the evidence points to as a crypto drainer. Here's what the traffic looked like and how we assessed it.