Cyber Crime Archives

HostMimic: Old Technique Revived – Non-Canonical IP URL Obfuscation

HostMimic: Old Technique Revived – Non-Canonical IP URL Obfuscation

HostMimic: Old Technique Revived – Non-Canonical IP URL Obfuscation Trustifi observed multiple quarantined phishing emails using a very old but still effective URL evasion technique: Non-Canonical IPv4 URL Obfuscation. We’re calling this observed phishing pattern HostMimic. The emails looked like...

May 14, 2026

Fake Claude Code Packages Are Stealing Developer Credentials, and Putting Enterprise Email Environments at Risk

AI Cyber Crime Email Scams Email Security

Fake Claude Code Packages Are Stealing Developer Credentials, and Putting Enterprise Email Environments at Risk

Introduction Fake packages that imitate popular developer tools are becoming a serious risk, and Claude Code-related names are now part of that trend. Attackers use typosquatted package names, which are names designed to look almost correct, to trick developers into...

May 13, 2026

Microsoft 365 Under Attack: How AiTM Phishing via SharePoint Leads to Credential Theft and BEC

Cyber Crime Email Security Phishing Technology

Microsoft 365 Under Attack: How AiTM Phishing via SharePoint Leads to Credential Theft and BEC

Introduction The rise of AiTM phishing in Microsoft 365 environments adversary-in-the-middle phishing, or AiTM , phishing has become one of the most effective ways to steal Microsoft 365 access. Instead of only collecting a username and password, these attacks can...

April 29, 2026

AI Phishing Is Back on Top, What That Means for Email Security in 2026

Cyber Crime Email Security Phishing

AI Phishing Is Back on Top, What That Means for Email Security in 2026

Introduction Phishing is not fading away, it is evolving. Cisco Talos reported that phishing reemerged as the top initial access vector in Q1 2026, responsible for 35% of incidents where the entry point could be identified. At the same time,...

April 27, 2026

When Disaster Strikes, Don’t Hit Send: Securing Emergency Communications in the Public Sector

Cyber Crime Email Security Phishing Public Sector Industry

When Disaster Strikes, Don’t Hit Send: Securing Emergency Communications in the Public Sector

Introduction When a natural disaster, cyberattack, or public safety emergency unfolds, email often becomes one of the fastest ways for public sector teams to coordinate response. Agencies use it to share status updates, issue procurement requests, notify leadership, communicate with...

April 19, 2026

How Attackers Abuse Legitimate Services to Bypass Email Security

Cyber Crime Email Security Phishing

How Attackers Abuse Legitimate Services to Bypass Email Security

Attackers have shifted how they use email. Instead of relying on suspicious domains or obvious phishing links, they now operate inside platforms your business already trusts, including Microsoft 365, Google Drive, Adobe, and DocuSign. Because these services use legitimate infrastructure,...

March 31, 2026

Critical Care, Critical Comms: Ensuring Secure Email Continuity During Hospital Crises

Compliance Cyber Crime Data Protection Email Security Healthcare Industry

Critical Care, Critical Comms: Ensuring Secure Email Continuity During Hospital Crises

Introduction Why email continuity is mission-critical in healthcare In a hospital, email is not just “office communication.” It supports referrals, discharge planning, vendor coordination, billing, HR, and often clinical workflows that keep care moving. When email goes down or becomes...

February 24, 2026

When Phishing Becomes Invisible: The Failure of Traditional Email Security

Cyber Crime Email Security Phishing Technology

When Phishing Becomes Invisible: The Failure of Traditional Email Security

Invisible phishing is the new frontier of cyber deception, representing attacks that conceal themselves in plain sight and evade even the most advanced detection systems. Modern attackers now rely on diverse evasion methods such as blob URIs, ASCII QR codes,...

February 4, 2026

Ballots and Inboxes: Ensuring Email Security During Elections and Campaigns

Cyber Crime Phishing Public Sector Industry

Ballots and Inboxes: Ensuring Email Security During Elections and Campaigns

Introduction Elections amplify the value of email to attackers because inboxes are where urgency, authority, and public trust collide. A single convincing message can misdirect voters, divert funds, or quietly compromise a campaign or election office. In this context, “email...

January 8, 2026

Closing the Case on Email Fraud: Stopping Business Email Compromise in Law Firm Transactions

Cyber Crime Financial Industry Legal Industry

Closing the Case on Email Fraud: Stopping Business Email Compromise in Law Firm Transactions

Introduction Business Email Compromise (BEC) is not a generic phishing problem, it is targeted fraud that exploits trust, timing, and routine. In law firms, it often lands right where pressure is highest, during closings, settlement disbursements, and trust account activity....

January 1, 2026

1 2 … 6 7

Category: Cyber Crime