Scams

The article details the threat landscape of 'suspicious websites' that evade traditional phishing classifications but remain highly dangerous. These include fake online stores, dubious crypto exchanges, and fake browser extensions. Threat actors leverage newly registered domains, cheap TLDs, and poor infrastructure security (missing HTTP headers, lack of SPF/DMARC) to conduct financial fraud, data theft, and browser hijacking. Detection requires a multi-faceted approach analyzing domain age, IP reputation, and infrastructure configurations.

2026-05-134 minRecorded Futurehigh

The article highlights the critical role of money mule accounts in Authorized Push Payment (APP) fraud and scams, which bypass traditional breach-based detection by manipulating victims into authorizing payments. It advocates for an intelligence-led approach, utilizing agentic personas to proactively identify and verify mule accounts before fraudulent transactions occur, thereby mitigating financial losses and addressing growing regulatory pressures.

2026-05-136 minInfobloxhigh

Cybercriminals are increasingly abusing the Keitaro adtech platform to optimize the distribution of malware, phishing, and scams. By leveraging Keitaro's built-in tracking, cloaking, and traffic distribution capabilities, actors can efficiently target victims, evade detection, and scale operations across multiple threat types including wallet drainers and infostealers.