Detecting an email-based ClickFix attack that delivers DCRat malware payload

Microsoft OAuth URL used as redirect to AITM credential phishing site

Base64-encoding an SVG attack within an iframe and hiding it all in an EML attachment

Scripting Vector Grifts: SVG phishing with smuggled JS and adversary in the middle tactics

Tax season email attacks: AdWind RATs and Tycoon 2FA phishing kits

Callback phishing via invoice abuse and distribution list relays

Talking phish over turkey

Living Off the Land: Credential Phishing via Docusign abuse

Living Off the Land: Callback Phishing via Docusign comment