Typosquatted domain with a fake login page
Shortly after appearing in certificate transparency logs, the freshly registered domain began serving a copy of the organisation's login page that posted credentials to a third-party server.
3 modules
IG-UC · CASE ARCHIVE
Use cases
The anatomy of real CTI cases: how a threat starts, how it is detected and how it is closed. Every file here is an example scenario.
Impersonation account targeting an executive
An account copying the profile photo and title began direct-messaging employees and business partners.
3 modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.