ECO TCH EL Eliya Stein · Confiant How One “Crypto Drainer” Template Facilitates Tens Of Millions Of Dollars In Theft Our previous blog provided an overview of Web3 phishing techniques and tactics, all of which continue to be relevant despite a recent…
TCH MKT EL Eliya Stein · Confiant The Curious Case Of MutantBedrog’s Trusted-Types CSP Bypass MutantBedrog is a malvertiser that caught our attention early summer ’24 for their highly disruptive forced redirect campaigns and the…
ECO DA Daniel Fonseca Yarochewsky · Confiant CashRewindo: How to age domains for an investment scam like fine scotch Years-old domains, compromised JS libraries and worldwide-localized content among tactics of this sophisticated attacker.
TCH ECO MKT EL Eliya Stein · Confiant Malvertiser “D-Shortiez” abuses WebKit back button hijack in forced-redirect campaign Over the last few years, as AdTech and browser security has continued to mature, many malvertisers have moved on from forced redirect…
TCH DSN HUM ECO BO BOZOSLIVEHERE · Confiant Exploring ScamClub Payloads via Deobfuscation Using Abstract Syntax Trees Introduction
GEN MI Michael Steele · Confiant ScamClub’s Deceptive Landing Pages What ScamClub brings its victims to after forcefully redirecting them through malicious ads.
TCH AI JE Jerome Dangu · Confiant Malvertiser Makes the Big Bucks on Black Friday Confiant’s broad coverage in ad tech gives us visibility on some of the darkest corners of the ecosystem. We are strong believers that to…
SPT DA Daniel Fonseca Yarochewsky · Confiant BadTrip: A chain of fake travel sites abuses search ads to commit fraud and credential theft Brand impersonation and “cloaked” call-centers scale the scam up to more than 50,000 people. Scammers raking in upwards of $800 per victim.
TCH RO Roshan · Confiant Phantom Stores: Retail Impersonation Spreads Ahead of Black Friday Powered by Video Ads and Modular… In the frenzied weeks leading up to Black Friday and Cyber Monday, Ad Tech’s busiest season, a new cluster of phantom storefronts has…
TCH TA taha aka "lordx64" · Confiant L’art de l’évasion: How Shlayer hides its configuration inside Apple proprietary DMG files Intro