Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the mlab team. Written for analysts who want the indicators, the method and the fix.
#fraud
Newest first
Investigating Smishing Campaigns and Suspicious Phone Numbers
Parcel fees, unpaid tolls, blocked bank cards: SMS phishing is cheap, mobile first and hard to see from the SOC. How to read a sender number or ID, what carrier and VoIP data really tells you, how to unwrap the link, and where to report so the campaign actually gets disrupted.
Business Email Compromise: The Billion-Dollar Attack Nobody Detects
BEC needs no malware, no exploit, and no payload. Just a convincing email and a wire transfer. Here is how it works, why tools miss it, and what stops it.
inkdex: an index that states facts, a scanner that judges them
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note