Email Security Blog
Best Email Security Solutions for MSPs
Picture this: one of your clients clicks a highly convincing phishing link on a Monday morning. By Friday, you are fielding angry phone calls, writing detailed incident reports, and watching your hard-earned reputation quietly unravel. It is not a rare...
How to Choose the Right Account Takeover Protection Solution
Imagine a legitimate employee account attempting a login at 3 a.m. from a foreign IP address with nothing flagging the event. There is no alert, no lock, and no notification while the attacker sits inside your environment, impersonating a real...
How Booking.com Impersonation Attacks Are Putting Hotels and Casinos at Risk of Credential Theft and Financial Fraud
Introduction Hospitality phishing campaigns targeting hotels, casinos, and travel-related operations Hotels, casinos, resorts, and travel operations rely on a constant flow of email messages to manage reservations, guest requests, payment questions, and partner communications. That volume creates the perfect cover...
HostMimic: Old Technique Revived – Non-Canonical IP URL Obfuscation
HostMimic: Old Technique Revived – Non-Canonical IP URL Obfuscation Trustifi observed multiple quarantined phishing emails using a very old but still effective URL evasion technique: Non-Canonical IPv4 URL Obfuscation. We’re calling this observed phishing pattern HostMimic. The emails looked like...
Fake Claude Code Packages Are Stealing Developer Credentials, and Putting Enterprise Email Environments at Risk
Introduction Fake packages that imitate popular developer tools are becoming a serious risk, and Claude Code-related names are now part of that trend. Attackers use typosquatted package names, which are names designed to look almost correct, to trick developers into...
How AI-Powered Impersonation Is Fueling Phishing Attacks Against Public Sector Agencies
Introduction The rise of AI-generated impersonation in public sector phishing AI has made phishing more convincing, faster to produce, and easier to personalize at scale. Instead of sending generic scam messages full of spelling errors, attackers can now create polished...
How AI-Powered Law Firm Impersonation Scams Are Turning Legal Brands Into Email Fraud Weapons
Introduction The rise of AI-powered impersonation scams targeting the legal industry Law firms have always been attractive targets for cybercriminals, but AI has changed the scale and quality of the threat. Attackers can now generate convincing emails, fake legal notices,...
QR Code Phishing Is Surging in Microsoft 365: How Businesses Can Stop the Next Wave of Credential Theft
Introduction QR code phishing’s growing role in Microsoft 365 email attacks QR code phishing, often called quishing, has moved from a niche tactic to a mainstream email threat. Instead of asking a user to click a suspicious link, attackers place...
AI-Enabled Device Code Phishing: The New Microsoft 365 Credential Theft Threat Businesses Need to Stop
Introduction Overview of AI-enabled device code phishing Phishing has changed. In many Microsoft 365 attacks, criminals no longer need to steal a user’s password to get in. Instead, they trick the user into completing a legitimate device sign-in flow, then...