Analysis · Retrospective 2024
Polyfill.io and the power delegated by a script tag
A third-party script can change a trusted page. The polyfill.io case makes that delegation explicit.
Topic
Fraud
Phishing, investment scams, payment fraud and impersonation: the schemes that turn deception into theft at scale.
Technical Advisory · Retrospective 2024
ClickFix asks the user to cross the execution boundary
A repair prompt can be a malware-delivery step. Investigate the requested action and whether it actually ran.
Analysis · Retrospective 2024
Old credentials opened Snowflake customer accounts
The 2024 Snowflake customer-account campaign followed stolen identities into database access and data export.
Technical Advisory · Retrospective 2022
AiTM phishing: why a completed MFA prompt can still end in session theft
The recovery task follows the stolen session into the mailbox, its persistence settings and the business conversations it exposed.