Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Behind the Fake Tax Notice - Part II: ValleyRAT Unmasked

In Part I of this series — “Behind the Fake Tax Notice” — the Foresiet Threat Intelligence Team mapped a multi-country, tax- and invoice-themed phishing network built around hxxps://adresesvip/. That infrastructure, hosted on Alibaba Cloud in Hong Kong, was used to target taxpayers across India, Germany, Malaysia and Japan. The first report documented the lure, the sender and the hosting, but left one question open: what does the campaign actually deliver?

How Brand Impersonation Leads to Account Takeover (ATO)

Brand impersonation and account takeover (ATO) are often treated as separate security problems. One is viewed as a phishing or brand abuse issue. The other is viewed as an authentication or fraud issue. Attackers often see them differently. Many ATO attacks begin long before a login attempt appears on a dashboard. They begin when a customer encounters a fake website, fraudulent search result, impersonating social media profile, cloned mobile app, or spoofed communication that appears legitimate.

Fake Tax Notice Phishing: How the Cross-Border Scam Network Operates

Foresiet identified adreses[.]vip as part of a localized phishing infrastructure cluster using tax, invoice, payroll, and document-download themes. The strongest evidence supports malicious phishing infrastructure and campaign-level clustering; named-actor elevation remains evidence-weighted and under active validation.

Candidate verification: Stop fraud before it enters your workforce

Sophisticated fraudsters are now targeting the recruiting process. Whether it's a "fake" candidate built on synthetic data, an interviewee hiding behind a deepfake, or a candidate getting a friend to take their technical test, hiring teams are facing a fraud crisis.

New pattern analysis techniques to defend against fraud

Sophisticated fraudsters scale systems to increase their ROI. But it’s also a weakness that you can exploit to shut down fraud rings and keep attacks from scaling. In this discussion, fraud experts Nisreen Hussain, Irfan Faizullabhoy, and Ashley Fang show off how pattern and link analysis stop AI-powered fraud, account takeovers, and large fraud rings.

Gen. AI used to mislead victims in fraud campaigns

It is almost impossible to trust the source of an image or video anymore. On The Cybersecurity Defenders Podcast, Tamas Kadar, CEO and Co-Founder of SEON, explains how generative AI has reshaped what fraudsters can pull off. Setting up sophisticated fraud operations no longer requires coding skills, and synthetic identities and deepfake documents have become convincing enough that visual verification alone is no longer reliable.

The MemcycoFM Show: Ep25 - How to Detect Brand Impersonation: Key Signals for Security Teams

In the recently published blog from @Memcyco titled 'How to Detect Brand Impersonation: Key Signals for Security Teams', we discussed brand impersonation detection, the process of identifying fake domains, cloned brand experiences, and the exposure signals that show attackers are using a trusted brand to deceive customers, employees, or partners. For security teams, the harder problem is not finding every impersonation asset. It is knowing which signals indicate live user exposure and which ones should change the response.

How to Avoid eBay Scams: What Buyers & Sellers Need to Know

eBay is one of the biggest online marketplaces in the world, but scammers are active on both sides of every transaction. Whether you're buying or selling, knowing what to look for can make all the difference. In this video, we break down: The most common eBay buyer scams — fake deals, missing items, phishing links How sellers get targeted — fake payments, overpayment scams, and false "item not received" claims.

Fake Bots, Fake Sites, Fake Trades: CS2 Scams to Watch For

Thousands of dollars move through CS2 every day. Skins pass from one account to another, trades happen by the minute, and the money flowing around them long ago outgrew simple in-Steam trading. The more money there is, the more people want to take it by deceiving players. These scammers don't hack directly; they don't write complex exploits or break into servers. Instead they copy what you already trust. Below are the three schemes that even experienced traders fall for, no fluff and no fiction, just what actually works against CS2 players today.