This ESET WeLiveSecurity article explains email bombing (also called form, list or subscription bombing) and cites a September report of a Virginia woman flooded with hundreds of emails in 24 hours. The flood hid a genuine bank alert about a fraudulent laptop purchase. Attackers use bots to sign a harvested email address up to many legiti…
Infoblox links the long-running Help TDS traffic distribution system, active since at least 2017, to the Russian-language affiliate program Hotejka, assessed with high confidence to be a rebrand of the traffic monetization operation ROI777. Help TDS supplies PHP templates and a malicious WordPress plugin that affiliates install on comprom…
Infoblox attributes the long-running Help TDS traffic distribution system, active since at least April 2017, to Hotejka, a small Russian-language affiliate program that appears to be a rebrand of ROI777 (exposed in 2018). The TDS fingerprints visitors and redirects them to browser-lock tech support scams that push victims to call centers,…
A Flare analysis argues that Scattered Spider, LAPSUS$ and ShinyHunters are distinct intrusion clusters within The Com, a decentralized, mostly English-speaking cybercriminal subculture, and not interchangeable names for one group. It describes SP1D3R HUNTERS (also called Scattered LAPSUS$ Hunters, SLH) as a shared brand and coordination …
Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…