SPF, DKIM, and DMARC: How to Stop Scammers From Faking Your Email
Email was built with no way to verify who a message really came from, so anyone can impersonate your domain. SPF, DKIM, and DMARC fix that. Here is how, in plain English.
Email & Phishing Defense
4posts
QR Code Phishing: The Attack Built to Skip Your Email Filter
A QR code is an image, and image-based links sail past text-scanning email filters. Here is exactly how quishing works, the pretexts to expect, and what to change.
Social Engineering: The Hack That Doesn’t Need a Computer
In July 2020, Twitter had a problem. The accounts of Barack Obama, Elon Musk, Bill Gates, Apple, and about 130 other high-profile users started tweeting a Bitcoin scam. The attackers didn't exploit a software vulnerability. They didn't find a zero-day. They called Twitter employees, pretended to be
Business Email Compromise: The $2.9 Billion Scam Hiding in Your Inbox
Here's a number that should genuinely concern you: $2.9 billion. That's how much business email compromise (BEC) cost American businesses in 2023, according to the FBI's Internet Crime Complaint Center. Not ransomware. Not crypto scams. Email. Plain, boring, text-based email. BEC is the single most