17 December, 2024

From chaos to control: Insights from 24 email bombing waves

On November 13, at exactly 10:50, Lars’ day took an unexpected turn. Within 63 minutes, he received...

Threat Analysis Team

• 5 min read

29 November, 2024

Email bombing: what you need to know

Email bombing, sometimes called "list linking" or "email cluster bombing," is a cyberattack that...

xorlab team

• 2 min read

27 March, 2024

Open Redirect Vulnerabilities: The Hidden Danger in Email Security

In this article, we explore how open redirects, a vulnerability in web applications, are leveraged...

Valentin Zahnd

• 7 min read

29 February, 2024

Phishing on GitHub: A Sophisticated Attack Leveraging Brand Trust

During the last week there has been an uprise in phishing cases originating from GitHub, targeting...

Valentin Zahnd

• 3 min read

18 January, 2024

New feature release: protection against QR code phishing

In 2023, our team observed a shift in phishing techniques, with attackers increasingly using QR...

Christine Hakenjos

• 1 min read

27 June, 2023

HTML smuggling: How malicious actors use JavaScript and HTML to fly under the radar

HTML smuggling started to pop up in 2021 as a serious elusive loader technique used by threat...

Max Fischer

• 4 min read

23 February, 2023

Testing Our Defenses Against ChatGPT-Generated Phishing & Fraud Emails

Phishing, fraud, and extortion attack simulations have become an essential tool in the fight...

Diana Diaconu

• 4 min read