SPF, DKIM and DMARC: What They Are and How to Stop Spoofing
SPF, DKIM and DMARC stop others from sending email as your domain. Learn what each does, how to check your domain and …
Phishing 31 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Kevin Mitnick: the story of the FBI's most wanted hacker
From teenage phreaker to FBI fugitive: how Kevin Mitnick became the most famous hacker in history and what his story …
Target 2013: the theft of 40 million cards via an HVAC vendor
In 2013, attackers breached Target through an HVAC contractor and stole 40 million cards — the attack that redefined …
How to disable Office macros and close this classic attack vector
VBA macros were the primary vector for Emotet, Qakbot and Dridex. Learn how the attack works and how to block macros in …
Fake support: when AI hands you the scammer's phone number
Googling a company's helpline — or asking an AI for it — can put you straight through to a scammer. Here's how the fake …
AI scams: the 6 most common ones and how to protect yourself
Cloned voices, deepfakes, flawless phishing: the fastest-growing AI scams, how each one works, and the defenses that …
How generative AI changed phishing: perfect emails, zero mistakes
AI-generated phishing emails already hit an 81% click rate. How ChatGPT and similar tools raised the quality of the scam …
Watering hole attack: when legitimate sites become a trap
A watering hole attack compromises legitimate sites to infect specific groups of victims. How it works, real cases and …
The fake-relative scam with an AI-cloned voice: how it works and how to protect yourself
Criminals use AI to clone the voices of children and grandchildren and demand an urgent transfer by phone. How the scam …
WormGPT and FraudGPT: how the malicious AI sold on the dark web works
WormGPT and FraudGPT are chatbots with no safety filters, sold for up to US$1,700 a year on the dark web. How they work …