email

Cybercriminals are now deploying web applications generated by Bubble, an AI-powered app builder, to hunt for corporate credentials.

Attackers are delivering phishing links via Google Tasks notifications.

We’re diving into the most intriguing and sophisticated phishing and spam schemes intercepted by our experts throughout 2025.

Crooks are impersonating your brand to attack customers, partners, and employees. How do you spot — and stop — an attack of the clones?

Cybercriminals are distributing malware that deploys an infostealer and masks its activity in network and system logs.

GReAT experts have analyzed a new targeted campaign by the ForumTroll APT group.

Here’s how to mitigate the risks of targeted attacks on your organization’s mail servers.

You’ve received a threatening email. What’s your next move?

Attackers pretending to be airlines or airports are sending out fake partnership offers.

Attackers spin poignant tales of lost private keys as they try to phish seed phrases.

Don’t panic. Again, don’t panic. Did we say don’t panic? A common threat explained in simple terms.

Scammers are tricking people into giving up cryptocurrency through Google Forms surveys. Here is what they are doing and how to avoid falling victim to this scam.

A curious case of spear-phishing email techniques employed on a mass scale.

Scammers are exploiting Google services to send fake law enforcement inquiry notifications, making them look like they originate from accounts.google.com.

Archives are being used in targeted phishing and other attacks on organizations. What tools, settings, and policies can mitigate the threat?

Scammers are exploiting GetShared to bypass email security.

We’ve added technology that checks QR codes in emails for phishing links.

A vulnerability in Google OAuth allows attackers to access accounts of defunct organizations through abandoned domains.

How to avoid giving away your password to scammers when logging in to third-party sites or viewing “encrypted” or “confidential” documents.

The patch that fixes CVE-2024-49040 in Microsoft Exchange is temporarily unavailable. We’ve implemented heuristics that detect attempts to exploit it.

Phishers have adopted another trick: they send emails pretending to be from Docusign with a fake link to a document that the recipient must sign.