Preview image for a blog post

GhostCode Alert: New Phishing Kit Leverages Web Forms to Compromise Sales Teams

GhostCode phishing kit targets sales teams via web contact forms, bypassing security. Learn technical analysis, defense, and forensics.
Preview image for a blog post

Outsider Phishing Kit Defies Takedown: 700 New Pages Emerge Post-Google Disruption

Analysis of a resilient phishing kit generating 700 new pages post-takedown, exploring its evasion tactics and advanced threat intelligence.
Preview image for a blog post

Lexfo Uncovers Sophisticated Phishing Kits Leveraging Evilginx to Bypass MFA

New phishing kits use open-source Evilginx to proxy M365 sessions, capturing cookies and OAuth tokens, bypassing MFA.
Preview image for a blog post

FBI Warns: Kali365 Phishing Kit Exploits Microsoft 365 OAuth for Persistent Access

FBI warns of Kali365, a fast-growing phishing kit abusing Microsoft 365 OAuth to gain persistent access, posing a severe threat.