Speaker
Recon team
Resources and links
- Detecting Fake CAPTCHA Campaigns: ClickFix, ClearFake, and Etherhidereconinfosec.com
- ClickFix attacks sector alert (HHS)hhs.gov
- Phishing Campaign Leverages Trusted Google Cloud Automation Capabilities to Evade Detectionblog.checkpoint.com
- “You’re Dead”: The Legal Call, Google Signed Email & Phone Prompt Scam Trying to Steal Google Workspaceslinkedin.com
- Prolific Phishing Campaign Leveraging Zoom's Infrastructurereconinfosec.com
- Open Redirectintigriti.com
- ICS phishing: Stopping a surge of malicious calendar invitessublime.security
- TAGITM room block phishlinkedin.com
- HTTP Client Tools Exploitation for Account Takeover Attacksproofpoint.com
- ReliaQuest Annual Cyber-Threat Reportreliaquest.com
- Phishing that poses as X support to connect accounts to attacker-controlled third-party appshelp.x.com
- Push Security, a vendor that detects those browser threatspushsecurity.com
- TamperedChef: Malvertising to Credential Theftlabs.withsecure.com
- Recommended in Microsoft environments: review admin consent requestslearn.microsoft.com