We use essential cookies to run this site. With your permission, we also use analytics and marketing cookies. Cookie policy
Research, guides and analysis on phishing, social engineering and building secure behaviour in employees.
Featured · Phishing attacks and examples
15 phishing email examples for 2026: MFA fatigue, payroll lures, fake invoices. DBIR: 16% phishing as initial access; median sim click ~1.4%. Red flags and reporting playbook.
How phishing attacks work, with real examples by type and channel.
Fake recruiter campaigns now reject personal email and accept only work accounts. How the fake interview flow steals corporate logins and how to stop it.
OAuth consent phishing explained: how a single approval on a real Microsoft or Google login screen hands attackers a token that bypasses MFA and survives password resets, and how to detect, prevent, and simulate it.
A real invoice fraud attempt hit Keepnet's inbox: a clean PDF, no link, no malware, and every authentication check passing. Here is the anatomy of the attack, why AI is scaling it, and how to stop it.
How the two-email trust trap works, why it slips past both your filters and your training, and how to simulate it safely with Keepnet.
Authentication passed. The sender was still fake. A field report on 27 real Twilio SendGrid phishing emails that reached my inbox, what each one wanted, and how to defend against the campaign.
Malvertising is malicious advertising: attackers buy or inject ads (including Sponsored search ads) that redirect users to malware, scams, or credential theft. Best defenses include cautious handling of Sponsored results, patching, blocking redirects/popups, and layered web + endpoint controls.
Pop-up phishing is the ‘fake alert’ scam that hijacks your screen with urgent warnings like “Virus found!” or “Account locked.” This guide shows real patterns, what to click (and not), and defenses for users and teams, in minutes, no fluff!
Account takeover (ATO) is when criminals hijack online accounts using stolen credentials, session tokens, or MFA bypass tricks. Learn signs, risks, and how to prevent ATO.
AiTM phishing bypasses traditional MFA and leads to account takeover, session theft, and business email compromise. Learn how it works, how to detect it, and how to reduce the risk.
Looking up pharming definition or protection? This guide explains how pharming silently redirects users via DNS poisoning or hijacking, the red flags to spot it, and a prioritized checklist CISOs can deploy, DNSSEC, secure resolvers, router hygiene, EDR, and training, to cut risk fast.
Spear phishing is more than just another cyber buzzword. It’s one of the most dangerous cyber threats today. Unlike generic phishing attacks that target thousands at once, spear phishing focuses on specific individuals or organizations, making it harder to detect and more devastating when successful.
Elicitation is one of the most subtle yet dangerous social engineering tactics in cybersecurity. Through casual conversations, attackers can extract critical details without you even realizing it. In this post, we uncover how elicitation works, the psychology behind it, and the steps you can take to stay protected.
30 minutes with a Keepnet specialist, on your own use cases.