Opsec Cyber Phishing Archives

Category Archives: Phishing

Scam USPS and E-Z Pass Texts and Websites

November 20 2025 By Bruce Schneier in China, Cybercrime, Google, Phishing, Security

Google has filed a complaint in court that details the scam:

In a complaint filed Wednesday, the tech giant accused “a cybercriminal group in China” of selling “phishing for...
Read more

Malicious-Looking URL Creation Service

September 25 2025 By Bruce Schneier in Phishing, Security

This site turns your URL into something sketchy-looking. For example, www.schneier.com becomes https://cheap-bitcoin.online/firewall-snatcher/cipher-injector/phishing_sniffer_tool.html?form=inject&host=spoof&id=bb1bc121&parameter=inject&payload=%28func...

Why Take9 Won’t Improve Cybersecurity

May 30 2025 By Bruce Schneier in Phishing, Security

There’s a new cybersecurity awareness campaign: Take9. The idea is that people—you, me, everyone—should just pause for nine seconds and think more about the link they are planning to...

Device Code Phishing

February 19 2025 By Bruce Schneier in authentication, Phishing, Russia, Security

This isn’t new, but it’s increasingly popular:

The technique is known as device code phishing. It exploits “device code flow,” a form of authentication formalized in the industry-wide Read more

Phishing False Alarm

January 15 2025 By Bruce Schneier in Phishing, Security

A very security-conscious company was hit with a (presumed) massive state-actor phishing attack with gift cards, and everyone rallied to combat it—until it turned out it was company management...

AI Will Increase the Quantity—and Quality—of Phishing Scams

June 3 2024 By Bruce Schneier in Phishing, Security

A piece I coauthored with Fredrik Heiding and Arun Vishwanath in the Harvard Business Review:

Summary. Gen AI tools are rapidly making these emails more advanced, harder to spot, and...
Read more

X.com Automatically Changing Link Text but Not URLs

April 16 2024 By Bruce Schneier in Phishing, Security, Twitter

Brian Krebs reported that X (formerly known as Twitter) started automatically changing twitter.com links to x.com links. The problem is: (1) it changed any domain name that ended with...

[email protected]

Singapore CBD

Category Archives: Phishing

Scam USPS and E-Z Pass Texts and Websites

Malicious-Looking URL Creation Service

Why Take9 Won’t Improve Cybersecurity

Device Code Phishing

Phishing False Alarm

AI Will Increase the Quantity—and Quality—of Phishing Scams

X.com Automatically Changing Link Text but Not URLs

Recent Posts

Friday Squid Blogging: Squid Found in Light Fixture

Flock Exposes Its AI-Enabled Surveillance Cameras

LinkedIn Job Scams

Using AI-Generated Images to Get Refunds

Are We Ready to Be Governed by Artificial Intelligence?

Recent Comments

Archives

Categories

Meta

Contact Us

[email protected]

Singapore CBD

+65 8714 2780