Skip to content

Fresh Phish

All the freshest phish

  • DMARC Speaker for Security Conference
  • Privacy Policy

Author: Matt

Cat Links Phish

Convincing IRS ID.me Phish Making the Rounds

Posted on February 8, 2024February 11, 2024 Matt

It’s tax season so you know malicious actors are going to try to come after your tax refunds. This one

Continue readingConvincing IRS ID.me Phish Making the Rounds

Cat Links DMARC

Public Email Providers To Require Security

Posted on January 25, 2024January 25, 2024 Matt

Does your organization send more than 5000 emails per day to Gmail, Yahoo or Apple recipients? If so, and you

Continue readingPublic Email Providers To Require Security

Cat Links Phish

Phish Using QR Codes

Posted on September 29, 2023 Matt

I knew it was inevitable. It has finally happened. I’ve spotted two phish using QR codes in the wild. Why

Continue readingPhish Using QR Codes

Cat Links Phish

Delivering Executable Using Registry File

Posted on September 21, 2023September 23, 2023 Matt

I just came across this phish that had a method of delivering an executable file that I’ve never seen before.

Continue readingDelivering Executable Using Registry File

Cat Links Phish

WordPress Blog Posts Host Phish

Posted on July 19, 2023 Matt

No, not this one. But I did find a phish being sent from what appears to be a compromised account

Continue readingWordPress Blog Posts Host Phish

Cat Links Phish

Phish Landing Page Hosted on Citibank Server Redirects to Phish on Microsoft Server

Posted on May 5, 2023September 23, 2023 Matt

I recently came across a phishing emails with a link leading to a subdomain of citi.com, owned by Citibank. Further

Continue readingPhish Landing Page Hosted on Citibank Server Redirects to Phish on Microsoft Server

Cat Links Phish

Email Attachment With RTLO Character in Filename

Posted on April 3, 2023April 3, 2023 Matt

I had heard about malicious actors potentially using the Right-To-Left-Override (Unicode U+202e) character a while back. This is the first

Continue readingEmail Attachment With RTLO Character in Filename

Cat Links Phish

Phishing Link Leads to Google Translate

Posted on February 27, 2023February 27, 2023 Matt

This phish contains a link that leads to Google Translate.

Cat Links Phish

Bitcoin Phish

Posted on February 13, 2023February 13, 2023 Matt

Here’s a type of phish I haven’t seen before. It intends to make the victim believe they opened some sort

Continue readingBitcoin Phish

Cat Links Phish

Refund Scam Sent Through PayPal

Posted on January 30, 2023January 30, 2023 Matt

This email was sent through PayPal. While it doesn’t have any malicious links or attachments and doesn’t appear to be

Continue readingRefund Scam Sent Through PayPal

Posts navigation

Older posts
Newer posts

Recent Posts

  • Fraudulent Accounts Created for EA Games
  • DNS as an Attack Vector
  • Convincing Social Security Phish
  • Malicious Actors Sending Phish Using Microsoft Secure Messaging Platform
  • Hack Utilizes Organic Component

Recent Comments

  1. DNS as an Attack Vector - Fresh Phish on Delivering Executable Using Registry File
  2. DNS as an Attack Vector - Fresh Phish on Getting Malware Past Email Filter
  3. Skyraker Beyond on Credential Phish on Microsoft Hosted Site
  4. Yahoo Mail Phish Follow-Up - Fresh Phish on Yahoo Email Phish

Archives

  • August 2025
  • May 2025
  • March 2025
  • November 2024
  • July 2024
  • April 2024
  • February 2024
  • January 2024
  • September 2023
  • July 2023
  • May 2023
  • April 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022

Categories

  • DMARC
  • Malvertising
  • Phish
  • Uncategorized
Copyright © 2025 Fresh Phish Privacy Policy | Signify Dark by WEN Themes
Scroll Up