Helping people spot phishing before they click. I built PhishGlass – an AI tool that checks emails, texts, screenshots & QR codes. DM me suspicious messages.
In the future
Joined November 2025
- Tweets8.9K
- Following59
- Followers221
- Likes3.1K
Pinned Tweet
............and it's free now! 🤯
Ride the gravity, score high and get yourself featured on the leaderboard. If you want to keep going after crashing, you can buy extra lives.
Playing itself costs nothing. Try it today! Be hooked tomorrow.
bid2outbid.com
Bid2outbid.com transformed into a game and is gaining momentum. It's free to play.
Score yourself at the top of the leaderboard.
#gameoverse #Gameplay #space
I'm trying out YouTube Shorts as a way of promoting PhishGlass.
Has anyone had great success on YouTube?
youtube.com/shorts/xrxX_IKBP…
Threat actors never sleep! Roughly 17,000 unique domains used to impersonate Japanese banks, payment services, Amazon, Apple, Rakuten, DHL, and other brands.
Why does this matter? Learn how to avoid falling prey:
This is just nuts!
More Microsoft impersonation sites found, targeting Copilot, Outlook and Teams users.
Fake Teams download page delivers an EXE.
IOCs:
hxxps://www[.]microsoft[.]com[.]office[.]verescence---o365[.]verescence[.]com[.]myshn[.]eu/
hxxps://copilot[.]cloud[.]microsoft[.]office[.]verescence---o365[.]verescence[.]com[.]myshn[.]eu/
hxxps://copilot[.]cloud[.]microsoft[.]office[.]o365rp2[.]betagro[.]myshn[.]net/
hxxps://copilot[.]cloud[.]microsoft[.]softlist365[.]softlist[.]softlistltdshn[.]myshn[.]net/
Teams EXE SHA256:
e0b0a89c449acdb6ac9eb181dbf1be6ca0824ea215429ddcc927703086a0e608
#Phishing #Malware #ThreatIntel #Microsft @micro
@500mk500 @skocherhan
A is legit.
B is malicious.
This is called a homograph attack which exploits homoglyphs - Cyrillic letters that are rendered as Roman letters in our browsers but are completely different in Unicode.
HOW DOES KERBEROS ACTUALLY WORK?
Ever wondered how companies let you log in once and securely access multiple services without repeatedly entering your password?
Kerberos is one of the most important authentication protocols in enterprise cybersecurity.
Here’s how it works:
Meet Wazza—a sophisticated phishing kit making headlines for its multi-stage delivery system and deceptive Adobe-themed login experience.
Here's what makes it dangerous:
#Cybersecurity #Phishing #DeviceCodePhishing #OAuth #ThreatIntelligence #InfoSec #CyberAwareness
This is literally one of the worst phishing scams out there. The odds that a regular person will evade this is almost 0%. Even seasoned cyber security analysts may get fooled by this.
Have you seen this attack in the wild? Share your experience!
ALT https://phishglass.reverseai.org/
🚨 Une nouvelle technique de phishing permet de créer des URL quasiment impossibles à distinguer des vrais.
"аmazon.com" ← Faux
"amazon.com" ← Vrai
Vous ne voyez aucune différence ? Pourtant, dans la première adresse, le « a » initial est en réalité un caractère cyrillique qui ressemble parfaitement à notre alphabet.
Une simple lettre suffit à imiter un site connu pour vous tromper et voler vos identifiants ou vos cryptos.
On nous répète de toujours vérifier les URL avant de cliquer, mais cela ́e suffit plus avec ce genre de technique.
Le meilleur réflexe reste de ne jamais ouvrir un lien suspect et de passer directement par l'application officielle.
Ran this test and it's super cool! PhishGlass can detect homoglyphs!
You see an address that outwardly looks exactly like amazon.com, but it isn't. It uses a Cyrillic "a" instead of our Latin "a".
So @virustotal thinks that this is perfectly fine. Yes, I know, once the AV venders update their signatures we'll probably get a detection score of roughly 9/70.
PhishGlass on the other hand doesn't rely on AV engine signatures. It identifies these types of scams out of the box!
🚨 𝗙𝗿𝗲𝘀𝗵 𝗛𝗲𝗹𝗽𝗱𝗲𝘀𝗸-𝗧𝗵𝗲𝗺𝗲𝗱 𝗗𝗼𝗺𝗮𝗶𝗻𝘀 𝗜𝗺𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝘁𝗶𝗻𝗴 𝗙𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝗜𝗻𝘀𝘁𝗶𝘁𝘂𝘁𝗶𝗼𝗻𝘀
While threat hunting with @silentpush , I came across an interesting cluster of 𝗻𝗲𝘄𝗹𝘆 𝗰𝗿𝗲𝗮𝘁𝗲𝗱 𝗵𝗲𝗹𝗽𝗱𝗲𝘀𝗸-𝘁𝗵𝗲𝗺𝗲𝗱 𝗱𝗼𝗺𝗮𝗶𝗻𝘀.
The domain names appear to reference major financial brands, including 𝗝𝗣𝗠𝗼𝗿𝗴𝗮𝗻, 𝗕𝗮𝗻𝗸 𝗼𝗳 𝗔𝗺𝗲𝗿𝗶𝗰𝗮’𝘀 𝗖𝗮𝘀𝗵𝗣𝗿𝗼, 𝗪𝗲𝘀𝘁𝗽𝗮𝗰, 𝗖𝗵𝗮𝘀𝗲, 𝗮𝗻𝗱 𝗛𝗦𝗕𝗖.
🛡️ 𝗧𝗼 𝗳𝗲𝗹𝗹𝗼𝘄 𝗱𝗲𝗳𝗲𝗻𝗱𝗲𝗿𝘀 𝘄𝗼𝗿𝗸𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 𝗼𝗿 𝗽𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗻𝗴 𝘁𝗵𝗲𝘀𝗲 𝗳𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝗶𝗻𝘀𝘁𝗶𝘁𝘂𝘁𝗶𝗼𝗻𝘀: this may be worth a closer look. Keep an eye on newly registered lookalike domains, helpdesk-themed lures, and related infrastructure appearing in your telemetry.
Sharing with the community for awareness and further investigation.🤝
#Threathunting 🧙♂️
If you love Oats or chia seeds, this is for you.
Keep yourself healthy by eating good solid food. If you're unsure try KnowGula.
@dr_ericberg, are you in?
@MaorShlomo, @Base44.
Is anyone else having this issue with their Base44 app?
I entered my password, but can't sign in. No visible CAPTCHA anywhere...
These attacks are just getting increasingly insidious by the day!
Recent alerts describe phishing emails that abuse Microsoft’s real domain or signed tools. Victims are promised PDFs or legitimate documents but receive executables that install rogue ScreenConnect!
These are some of the most inspiring posts on X! If you're not already following Filip's journey, you're missing out.
7 years at $0, then suddenly things started moving. The earnings for September are almost 3x his salary. Let that sink in!
Motion graphics are a good example of what @marclou is saying. Event Sonnet 5.5 creates better graphics than ChatGPT.
We are at a level where content creation is just going to explode wildly! Most people won't be able to appreciate how much work this once actually took.
The more I use Opus 5.5, the more I realize how far behind OpenAI models are.
Not just coding. Everything.
I sent GPT-6 Astra my V02 max lab test results, and it gave me a headache. 200 sentences of: "your report shows this, I think that, therefore it's inconclusive".
On the other hand, Opus 5.5 gave me the gist and actionable steps.
OpenAI models right now are like that overthinking guy who can't make a decision.
Opus 5.5 is that high-agency friend who tells you exactly what you need to hear in one sentence.
I don't know how the gap widened so much in the last few months.
Just submitted bid2outbid.com on @afternic. Anyone interested, can buy it there. DM me for special pricing.
