Opsec Cyber Phishing Archives

Category Archives: Phishing

Malicious-Looking URL Creation Service

September 25 2025 By Bruce Schneier in Phishing, Security

This site turns your URL into something sketchy-looking. For example, www.schneier.com becomes https://cheap-bitcoin.online/firewall-snatcher/cipher-injector/phishing_sniffer_tool.html?form=inject&host=spoof&id=bb1bc121&parameter=inject&payload=%28func...

Why Take9 Won’t Improve Cybersecurity

May 30 2025 By Bruce Schneier in Phishing, Security

There’s a new cybersecurity awareness campaign: Take9. The idea is that people—you, me, everyone—should just pause for nine seconds and think more about the link they are planning to...

Device Code Phishing

February 19 2025 By Bruce Schneier in authentication, Phishing, Russia, Security

This isn’t new, but it’s increasingly popular:

The technique is known as device code phishing. It exploits “device code flow,” a form of authentication formalized in the industry-wide Read more

Phishing False Alarm

January 15 2025 By Bruce Schneier in Phishing, Security

A very security-conscious company was hit with a (presumed) massive state-actor phishing attack with gift cards, and everyone rallied to combat it—until it turned out it was company management...

AI Will Increase the Quantity—and Quality—of Phishing Scams

June 3 2024 By Bruce Schneier in Phishing, Security

A piece I coauthored with Fredrik Heiding and Arun Vishwanath in the Harvard Business Review:

Summary. Gen AI tools are rapidly making these emails more advanced, harder to spot, and...
Read more

X.com Automatically Changing Link Text but Not URLs

April 16 2024 By Bruce Schneier in Phishing, Security, Twitter

Brian Krebs reported that X (formerly known as Twitter) started automatically changing twitter.com links to x.com links. The problem is: (1) it changed any domain name that ended with...