2 July, 2025

Seed Poisoning: It’s not always about malicious Phishing URLs

As email security researchers, we see many email attacks on a daily basis. The majority rely on...

Candid Wüest

• 2 min read

6 May, 2025

Inside a parcel delivery phishing scam: a peek behind the curtain

You're probably familiar with parcel delivery phishing emails—they’re a common tactic and rank just...

Candid Wüest

• 3 min read

17 December, 2024

From chaos to control: Insights from 24 email bombing waves

On November 13, at exactly 10:50, Lars’ day took an unexpected turn. Within 63 minutes, he received...

Threat Analysis team

• 5 min read

29 November, 2024

Email bombing: what you need to know

Email bombing, sometimes called "list linking" or "email cluster bombing," is a cyberattack that...

Threat Analysis team

• 2 min read

27 March, 2024

Open Redirect Vulnerabilities: The Hidden Danger in Email Security

In this article, we explore how open redirects, a vulnerability in web applications, are leveraged...

Threat Analysis team

• 7 min read

29 February, 2024

Phishing on GitHub: A Sophisticated Attack Leveraging Brand Trust

During the last week there has been an uprise in phishing cases originating from GitHub, targeting...

Threat Analysis team

• 3 min read

18 January, 2024

New feature release: protection against QR code phishing

In 2023, our team observed a shift in phishing techniques, with attackers increasingly using QR...

xorlab team

• 1 min read