Sublime thoughts

Who are you trying to April Fool with that email scam?

Tycoon 2FA credential phishing with cloned internal employee login

Microsoft OAuth URL used as redirect to AITM credential phishing site

Seeing both sides of a service abuse financial fraud using YOPmail disposable messages

Base64-encoding an SVG attack within an iframe and hiding it all in an EML attachment

Scripting Vector Grifts: SVG phishing with smuggled JS and adversary in the middle tactics

Tax season email attacks: AdWind RATs and Tycoon 2FA phishing kits

Email Topic Modeling: Simplifying detection with ML-powered granularity

Credential phishing Charles Schwab account holders with 2FA bypass