5 articles
A finance employee wired $25.6 million after a video call with the CFO and colleagues — all AI-generated deepfakes. Short public audio clips can now seed convincing voice clones. Here's how vishing changed and what actually stops it.
SIM swapping redirects SMS and voice verification to an attacker-controlled device. Here's how number-porting fraud works, why SMS MFA fails, and what actually stops it.
BEC caused $3.05 billion in reported US losses in 2025 alone — without a single exploit. Here's the full attack chain from mailbox compromise to wire fraud, and the controls that actually stop it.
WhatsApp usernames reduce phone-number exposure, but they also create a new global namespace where brands, public bodies, and lookalike handles can become fraud infrastructure.
ESET uncovered CallPhantom — 28 Android apps with 7.3M downloads that sold fabricated call histories. A deep dive into the fraud mechanics, billing bypass, and how to protect yourself.