Salesforce infrastructure abuse: Stopping email scams and spam sent via SFDC

ICS phishing: Stopping a surge of malicious calendar invites

Google Careers impersonation credential phishing scam with endless variation

Multi-RMM attack: Splashtop Streamer and Atera payloads delivered via Discord CDN link

AITM phishing with Russian infrastructure and detection evasion from a lapsed domain

Detecting an email-based ClickFix attack that delivers DCRat malware payload

Microsoft OAuth URL used as redirect to AITM credential phishing site

Base64-encoding an SVG attack within an iframe and hiding it all in an EML attachment

Scripting Vector Grifts: SVG phishing with smuggled JS and adversary in the middle tactics