Email security has never been better. Machine learning classifiers, sandboxed URL detonation, real-time reputation scoring, and AI-powered phishing detection have made it substantially harder to land a malicious link in someone’s inbox. Security vendors have invested billions in solving the problem of malicious URLs in email. So attackers stopped putting URLs in email. Instead, they…
For years, multi-factor authentication (MFA) was the gold standard of account security. Security teams deployed it across every critical system, confident that even if a password was stolen, the attacker couldn’t get in. That confidence is no longer justified. Adversary-in-the-Middle (AiTM) phishing attacks have rendered traditional MFA nearly useless for credential-based authentication, and the kits…
During routine email security monitoring, I intercepted a phishing email carrying a malicious HTML attachment. What made this sample interesting was not its novelty. HTML smuggling is a well-documented technique but the specific combination of layered obfuscation, Blob-based payload delivery, and LNK proxy execution that points to a deliberate, operationally mature threat actor. This post…