Password managers are brilliant at spotting phishing attacks. If the destination URL isn’t right, the password manager refuses to fill in your login credentials.
Start using a password manager (but not the one in your browser), it will help stop the phishers.
Start using a password manager (but not the one in your browser), it will help stop the phishers.
December 17, 2025 at 9:17 AM
Password managers are brilliant at spotting phishing attacks. If the destination URL isn’t right, the password manager refuses to fill in your login credentials.
Start using a password manager (but not the one in your browser), it will help stop the phishers.
Start using a password manager (but not the one in your browser), it will help stop the phishers.
The phishers are getting more imaginative or maybe AI is helping them out. The latest attempts to phish into our SendGrid account are emails saying that they are going to add their own LGBTQ+ pride theming to all emails and that you need to sign in to opt out. Nice try.
December 16, 2025 at 2:24 PM
The phishers are getting more imaginative or maybe AI is helping them out. The latest attempts to phish into our SendGrid account are emails saying that they are going to add their own LGBTQ+ pride theming to all emails and that you need to sign in to opt out. Nice try.
Believe it or not, there are real people who interact with social media, despite the massive proliferation of of bots and Nigerian phishers.
-You've just got to be a little cautious and careful about who you interact with.
-You've just got to be a little cautious and careful about who you interact with.
December 16, 2025 at 1:26 AM
Believe it or not, there are real people who interact with social media, despite the massive proliferation of of bots and Nigerian phishers.
-You've just got to be a little cautious and careful about who you interact with.
-You've just got to be a little cautious and careful about who you interact with.
Serious question: who scams people more: large corporations or on line phishers?
My hypothesis is corporations, having dealt with my mom's finances near the end.
My hypothesis is corporations, having dealt with my mom's finances near the end.
December 16, 2025 at 12:14 AM
Serious question: who scams people more: large corporations or on line phishers?
My hypothesis is corporations, having dealt with my mom's finances near the end.
My hypothesis is corporations, having dealt with my mom's finances near the end.
SMS Phishers Pivot to Points, Taxes, Fake Retailers
SMS Phishers Pivot to Points, Taxes, Fake Retailers
krebsonsecurity.com
December 15, 2025 at 7:39 AM
SMS Phishers Pivot to Points, Taxes, Fake Retailers
Some phishers have taken inspiration from Russian cyber-espionage group UTA0355 and are using a technique that tricks users into sharing their OAuth material in a web page (UAT0355 did it via email replies)
pushsecurity.com/blog/consent...
pushsecurity.com/blog/consent...
December 11, 2025 at 6:13 PM
Some phishers have taken inspiration from Russian cyber-espionage group UTA0355 and are using a technique that tricks users into sharing their OAuth material in a web page (UAT0355 did it via email replies)
pushsecurity.com/blog/consent...
pushsecurity.com/blog/consent...
Phishers Exploit Free Cloudflare Pages to Conceal Banking Scams
Phishers are exploiting free Cloudflare Pages to mask sophisticated banking scams, leveraging legitimate infrastructure to evade detection and trick users.
Phishers are exploiting free Cloudflare Pages to mask sophisticated banking scams, leveraging legitimate infrastructure to evade detection and trick users.
Phishers Exploit Free Cloudflare Pages to Conceal Banking Scams
Phishers are exploiting free Cloudflare Pages to mask sophisticated banking scams, leveraging legitimate infrastructure to evade detection and trick users.
concisecyber.com
December 10, 2025 at 4:05 PM
Phishers Exploit Free Cloudflare Pages to Conceal Banking Scams
Phishers are exploiting free Cloudflare Pages to mask sophisticated banking scams, leveraging legitimate infrastructure to evade detection and trick users.
Phishers are exploiting free Cloudflare Pages to mask sophisticated banking scams, leveraging legitimate infrastructure to evade detection and trick users.
Omg lol 🤣 honestly I wouldn't mind having some purple teamers run a train(ing) on me. 🌝
But in all seriousness, as a perlocutionary statement, some reasons sex work clients, customers, and workers are so targeted by phishers is something I've described at some length, here: bsky.app/profile/viol...
But in all seriousness, as a perlocutionary statement, some reasons sex work clients, customers, and workers are so targeted by phishers is something I've described at some length, here: bsky.app/profile/viol...
I used to teach a digital defenses workshop in which students built a social media credential harvester in about 5mins using the venerable Social Engineering Toolkit (SET) pentest tool and yet I'm kind of blown away by how many more phishing attacks I'm subjected to as an escort than as an engineer.
"Phishing is the most common technique used to gain sensitive information like passwords or 2-step login codes that lead to compromised internet accounts and Tryst link accounts are not exempt from these regular phishing attempts."
tryst.link/blog/slut...
tryst.link/blog/slut...
December 10, 2025 at 12:40 AM
Omg lol 🤣 honestly I wouldn't mind having some purple teamers run a train(ing) on me. 🌝
But in all seriousness, as a perlocutionary statement, some reasons sex work clients, customers, and workers are so targeted by phishers is something I've described at some length, here: bsky.app/profile/viol...
But in all seriousness, as a perlocutionary statement, some reasons sex work clients, customers, and workers are so targeted by phishers is something I've described at some length, here: bsky.app/profile/viol...
How phishers hide banking scams behind free Cloudflare Pages #malware
How phishers hide banking scams behind free Cloudflare Pages
Eyal Estrin
unread,
2:35 PM (20 minutes ago)
to
https://www.malwarebytes.com/blog/news/2025/12/how-phishers-hide-banking-scams-behind-free-cloudflare-pages
Eyal Estrin
CISSP, CCSP, CISM, CISA, CDPSE, CCSK
Blog: https://security-24-7.com | Books: https://amzn.to/42Xai9A | https://amzn.to/3Sggbtv
Twitter: @eyalestrin | Bluesky: @eyalestrin.bsky.social
Reply all
Reply to author
Forward
groups.google.com
December 9, 2025 at 7:56 PM
How phishers hide banking scams behind free Cloudflare Pages #malware
How phishers hide banking scams behind free Cloudflare Pages #cybersecurity #hacking #news #infosec #security #technology #privacy www.malwarebytes.com...
December 9, 2025 at 11:14 AM
How phishers hide banking scams behind free Cloudflare Pages #cybersecurity #hacking #news #infosec #security #technology #privacy www.malwarebytes.com...
How phishers hide banking scams behind free Cloudflare Pages | Malwarebytes https://www.malwarebytes.com/blog/news/2025/12/how-phishers-hide-banking-scams-behind-free-cloudflare-pages
December 9, 2025 at 7:43 AM
How phishers hide banking scams behind free Cloudflare Pages | Malwarebytes https://www.malwarebytes.com/blog/news/2025/12/how-phishers-hide-banking-scams-behind-free-cloudflare-pages
How phishers hide banking scams behind free Cloudflare Pages https://www.malwarebytes.com/blog/news/2025/12/how-phishers-hide-banking-scams-behind-free-cloudflare-pages
How phishers hide banking scams behind free Cloudflare Pages
How phishers hide banking scams behind free Cloudflare Pages
www.malwarebytes.com
December 9, 2025 at 3:23 AM
How phishers hide banking scams behind free Cloudflare Pages https://www.malwarebytes.com/blog/news/2025/12/how-phishers-hide-banking-scams-behind-free-cloudflare-pages
the bot blocked me and I imagine they will block me on their future accounts, THIS was not the first fake account they made and I KNOW it won't be the last. The most I can do is report them and spread the word.
and for the bot/phishers I look on clearsky, so I'll know whos phishing even still!
and for the bot/phishers I look on clearsky, so I'll know whos phishing even still!
December 8, 2025 at 6:52 PM
the bot blocked me and I imagine they will block me on their future accounts, THIS was not the first fake account they made and I KNOW it won't be the last. The most I can do is report them and spread the word.
and for the bot/phishers I look on clearsky, so I'll know whos phishing even still!
and for the bot/phishers I look on clearsky, so I'll know whos phishing even still!
How phishers hide banking scams behind free Cloudflare Pages for Malwarebytes Labs www.malwarebytes.com/blog/news/20...
How phishers hide banking scams behind free Cloudflare Pages
We found a campaign that hosts fake login pages on Cloudflare Pages and sends the stolen info straight to Telegram.
www.malwarebytes.com
December 8, 2025 at 5:10 PM
How phishers hide banking scams behind free Cloudflare Pages for Malwarebytes Labs www.malwarebytes.com/blog/news/20...
How phishers hide banking scams behind free Cloudflare Pages
How phishers hide banking scams behind free Cloudflare Pages
www.malwarebytes.com
December 8, 2025 at 3:35 PM
How phishers hide banking scams behind free Cloudflare Pages
Speaking of phishers. And I'm talking about those who want to steal game accounts. I genuinely don't understand: what for? What is their value? What can you do with them apart from selling and extorting from the owner?
December 8, 2025 at 1:28 AM
Speaking of phishers. And I'm talking about those who want to steal game accounts. I genuinely don't understand: what for? What is their value? What can you do with them apart from selling and extorting from the owner?
Believe me, no one cares. Maybe apart from phishers, but they are not part of Google team, I assure you.
December 8, 2025 at 1:28 AM
Believe me, no one cares. Maybe apart from phishers, but they are not part of Google team, I assure you.
About that NDA. Some of it makes sense, some sucks ass. Like, totally makes sense I can't share a certain account information with the person who is not the account owner, I can't share procedure details so phishers can't steal another account.
December 8, 2025 at 1:28 AM
About that NDA. Some of it makes sense, some sucks ass. Like, totally makes sense I can't share a certain account information with the person who is not the account owner, I can't share procedure details so phishers can't steal another account.
I can't conceive of having that much money, but Zuckerberg might have profitably spent part of it improving Facebook's glitchyness and made it less susceptible to scammers, spammers and phishers.
Rant over.
Rant over.
December 5, 2025 at 4:40 PM
I can't conceive of having that much money, but Zuckerberg might have profitably spent part of it improving Facebook's glitchyness and made it less susceptible to scammers, spammers and phishers.
Rant over.
Rant over.
Plus there's the fact that "Your Birth month equals" posts are ALWAYS Phishing posts. Phishers put these stupid memes out into the world then scour social media looking at peoples' answers until they have enough info to fill in a credit card application. NO ONE SHOULD EVER DO THESE THINGS.
December 5, 2025 at 4:16 PM
Plus there's the fact that "Your Birth month equals" posts are ALWAYS Phishing posts. Phishers put these stupid memes out into the world then scour social media looking at peoples' answers until they have enough info to fill in a credit card application. NO ONE SHOULD EVER DO THESE THINGS.
SMSフィッシング詐欺師はポイント、税金、偽の小売業者に狙いを定める
SMS Phishers Pivot to Points, Taxes, Fake Retailers #KrebsonSecurity (Dec 4)
krebsonsecurity.com/2025/12/sms-...
SMS Phishers Pivot to Points, Taxes, Fake Retailers #KrebsonSecurity (Dec 4)
krebsonsecurity.com/2025/12/sms-...
SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season:…
krebsonsecurity.com
December 5, 2025 at 9:15 AM
SMSフィッシング詐欺師はポイント、税金、偽の小売業者に狙いを定める
SMS Phishers Pivot to Points, Taxes, Fake Retailers #KrebsonSecurity (Dec 4)
krebsonsecurity.com/2025/12/sms-...
SMS Phishers Pivot to Points, Taxes, Fake Retailers #KrebsonSecurity (Dec 4)
krebsonsecurity.com/2025/12/sms-...
SMS Phishers Pivot to Points, Taxes, Fake Retailers – Krebs on Security krebsonsecurity.com/2025/12/sms-...
SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season: Phishi...
krebsonsecurity.com
December 5, 2025 at 3:20 AM
SMS Phishers Pivot to Points, Taxes, Fake Retailers – Krebs on Security krebsonsecurity.com/2025/12/sms-...
![Emoji Legend
💨x# | "Increased Trending Rate" for a Word (meaningful value; "💨x8 - burger" will mean "burger" is trending at 8 times its own normal rate for this time of day)
🔓 | "Unlocked" Ongoing Emergency Word (such words are not weighted down by their own previous usage; their *ongoing* increased usage--weeks, months, years--would otherwise move them down the list.)
[PREVIOUSLY USED]
⚠️💨# | "Trend Strength Rating"
⚠️🌀💨 | "Trend Strength Rating" (see above)
⚠️🌀 CAT. # | [same; "CAT." = Category, like hurricane]
💬# | 10min Post Count
🆎# | 10min Word Count
🙂# | 10min Emoji Count](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:k43ha6nlknmdw4owymqnvcat/bafkreigp6bgag3jzkool6uxrujpcrwtn6zkd7cbfrmevhaxaqhhewgolmu@jpeg)
SMS phishers pivot to points, taxes, fake retailers
Posted by todsacerdoti with a score of 26
krebsonsecurity.com
December 5, 2025 at 12:00 AM