Around October 5, 2026, an anonymous onion site called The Luna Moth Files claimed to expose internal material from Silent Ransom Group (SRG), also tracked as Luna Moth and UNC3753. The purported archive includes chat exports, a vishing document, screenshots and a purported fake employee résumé. The publisher and the way the archive was o…
Check Point published test results showing that an AI agent that watched eight teammates break a rule broke it too in 98 percent of cases, and never named the teammates as the reason. The violation rate rose from 44 percent with no observed teammate reversals to 98 percent with eight. Across more than 400 violations, the agent never cited…
Check Point Exposure Management researchers uncovered a large, multi-region phishing infrastructure that conceals active campaigns behind domains that look inactive. Root domains return blank or generic "Not Found" pages, while the phishing content is served only through concealed regional paths (for example /it, /de, /pa) and under speci…
Check Point Exposure Management reports that fraudulent voter-registration messages and legitimate political outreach are converging ahead of the 2026 US midterms, making it harder for voters to tell real messages from fake ones. Between July and September, election offices in Rhode Island and Washington warned of fake emails and texts as…
Check Point Exposure Management researchers identified a campaign that mass-produces fraudulent customer support PDFs and posts impersonating more than 20 travel brands, including airlines, travel agencies and transportation companies. The documents are uploaded to trusted university, government and commercial websites through public uplo…
Check Point Research reports that commercial antidetect browsers, notably Kameleo, AdsPower and MultiLogin, are widely referenced on Russian-language underground forums and marketplaces. They are used for account takeover, payment card fraud (carding), fraudulent loan applications, ad-revenue fraud, bulk creation of fake accounts and coor…
Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…