#phishing-email

Phishing Books — TryHackMe Write Up

A spoiler free phishing investigation using email headers attachment analysis Unicode deobfuscation and threat intelligence

How to Investigate Phishing Emails: Part 2 -The Authentication Trinity

In early 2026, Microsoft Security warned about a surge in phishing attacks that exploit complex email routing and misconfigured spoof…

Phishing Investigation Demystified: From Inbox to Incident Report

Phishing remains the most common initial access vector in modern breaches. The FBI IC3 continues to rank phishing and spoofing as the top…

NowYouSeeMe Challenge from Hacktrace Ranges

Write-ups written by DRax / Hacktrace Ranges

# Email Security Deep Dive – Part 3

SPF Explained: How Do We Know Who Is Allowed to Send Email for a Domain?

The Scam Email That Looked Real, and How I Proved It Was Not

I pulled apart a real phishing email from start to finish. Here is what it taught me about why “your email passed our security checks” can…

Day 31 & 32 of SOC Training

Introduction

THM SOC Simulator: Investigating a Phishing Attack

By Mahmoud Abdelmaged (0x2Glitch)

Phishing Attacks: Warning Signs & Prevention Tips

Phishing attacks have become a prevalent threat in our ever-connected world, where cybercriminals are constantly on the prowl for…

Training Humans, the weakest links in Cyber Security: My Experience Running a Phishing Simulation…

Introduction

Russian Hacker Groups Gamaredon and Turla: How They Worked Together to Attack Organizations

Cyber threats are constantly evolving, and attackers are finding new ways to become more effective. A recent report revealed that two…

I Built a Phishing Email Detector — And Found Two Dataset Bugs That Would Have Made It Useless

Most phishing classifiers you see on GitHub share the same problem: they look impressive on paper and fall apart under scrutiny. High…

Field Notes from the Blue Side: Deconstructing a Phishing Email

Phishing Unfolding — A Real-Time SOC Investigation (TryHackMe Walkthrough)

I’ve been documenting my SOC journey since I started — brute force simulations, network scanning, Wazuh lab setup, phishing email analysis…

Investigating a Business Email Compromise (BEC) Attack: A Forensic Analysis of “Operation Phantom…

By Emmanuel Nkwocha

Phishing Email Analysis Report: AWS Credential Harvesting Attempt

This report explains a phishing email incident that targeted an AWS administrator in our environment. The email was designed to look like a…

How to Analyze a Phishing Email: A Step-by-Step Guide

Phishing emails are one of the most common ways attackers try to break into organizations. As a SOC analyst, knowing how to properly…

The Email That Looks Like Help: What the Latest LastPass Phishing Campaign Gets Right

There’s a certain kind of email that makes you stop what you are doing.

The Email That Almost Got Through: How Phishing Slips Past Your Defenses

An analyst’s honest look at how phishing works and how we shut it down.

Betrugsversuche: Hetzner stellt um nach 2-Faktor-Authentifizierung

Sorry, this is made in german language.

How to recognize phishing emails and sites

Nowadays, phishing attacks are becoming more and more sophisticated and every internet user should be able to recognize phishing emails

Reeling in RedLine Stealer

Context

De Surelock Outlook security coach

De Holmes Security Coach is hét persoonlijke hulpmiddel tegen phishing waar elke medewerker op zijn of haar manier gebruik van kan maken…