Hackernews posts about Phishcan
- Detecting and mitigating a multi-stage AiTM phishing and BEC campaign (2023) (www.microsoft.com)
- $10K phishing kit claims it can plant rogue passkeys for persistent access (www.theregister.com)
- Show HN: TriageBox – AI checker for Gmail that flags phishing and clutter (triagebox.pfa87.cc)
- Invitation Scams: When a Birthday Party Becomes a Phishing Trap (brothke.medium.com)
- ASCII smuggling crosses over from AI prompt injection to phishing evasion (www.microsoft.com)
- Show HN: Reactor Atlas (reactoratlas.com)
- A phishing attack involving g.co, Google's URL shortener (gist.github.com)
- My bank keeps on undermining anti-phishing education (moritz-mander.de)
- A day in the life of a prolific voice phishing crew (krebsonsecurity.com)
- Google Safe Browsing missed 84% of confirmed phishing sites (www.norn-labs.com)
- SendGrid isn’t emailing about ICE or BLM – it’s a phishing attack (fredbenenson.com)
- Human study on AI spear phishing campaigns (www.lesswrong.com)
- Gone (Almost) Phishin' (ma.tt)
- FBI, Dutch police disrupt 'Manipulaters' phishing gang (krebsonsecurity.com)
- Crates.io phishing attempt (fasterthanli.me)
- Cybersecurity training programs don't prevent phishing scams (today.ucsd.edu)
- Active phishing campaign targeting crates.io users (blog.rust-lang.org)
- Chinese Innovations Spawn Wave of Toll Phishing via SMS (krebsonsecurity.com)
- Attacker Has Techdirt Reclassified as Phishing Site (www.techdirt.com)
- Microsoft Disrupts ONNX Phishing Service, Names Its Operator (www.securityweek.com)
- China-Based SMS Phishing Triad Pivots to Banks (krebsonsecurity.com)
- The growing threat of Docusign phishing attacks (2024) (www.darktrace.com)
- Windows infected with backdoored Linux VMs in new phishing attacks (www.bleepingcomputer.com)
- Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies (blog.quarkslab.com)
- $6.7M stolen from city of Portland in phishing scheme (www.oregonlive.com)
- Spirit Airlines' Abandoned Azure Booking APIs and Exposed Phishing Domains (braydenbte.substack.com)
- GitHub Y Combinator phishing attack (github.com)
- GitHub powered Y Combinator phishing campaign (y-comblnator.com)