The FIRE team uncovered an SEO poisoning marketplace that helps threat actors manipulate search rankings by placing malicious backlinks on compromised but legitimate websites.

John Wilson, Senior Fellow, Threat Research at Fortra, authored an article for The AI Journal examining the security implications of OpenAI’s Sora 2. The piece looks at how increasingly realistic AI-generated video changes the threat landscape, particularly around deepfakes, social engineering, and the misuse of personal likenesses. 

Josh Taylor examines how hacktivism has shifted from headline-grabbing stunts to something far more complex and harder to spot.

Fortra’s Alexis Ober was featured in The Hacker News article, “Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation.” The piece explores an ongoing large-scale campaign attributed to a China-linked threat group known as Smishing Triad. Alexis shared insights on how these attackers are evolving to exploit brokerage accounts and manipulate markets through “ramp and dump”...

Fortra’s latest research uncovers a new wave of executive phishing attacks leveraging QR codes, carried out by the Phishing-as-a-Service (PhaaS) group Tycoon2fa.

Fortra Intelligence & Research Experts (FIRE) are calling attention to a phishing campaign that impersonates well-known companies like Nvidia, Glassdoor, and Red Bull to lure job seekers into handing over personal data.

The Register reports that ransomware group SafePay claimed responsibility for a multi-day outage at Ingram Micro, one of the world’s largest tech distributors.

A recent phishing campaign analyzed by Fortra’s Suspicious Email Analysis team used a unique mix of methods to bypass detection and reach inboxes.

Fortra threat researchers recently uncovered a stealthy phishing campaign and a growing phishing-as-a-service (PhaaS) operation.

In this article for Unite.AI, Alexis Ober outlines how attackers are leveraging Vishing-as-a-Service to industrialize social engineering and what organizations can do to stay ahead.

Cybernews covered new research from Fortra that reveals how SheByte, a phishing-as-a-service (PhaaS) platform, is exploiting a market gap left by LabHost’s takedown.

In a video interview with Help Net Security, Threat Intel Analyst Alexis Ober breaks down how PlugValley is lowering the barrier to entry for cybercriminals and what it means for defenders.

Dark Reading reports that with PCI DSS 4.0.1 now in effect, merchants can no longer assume third-party service providers carry the full burden of compliance.

In Investopedia's latest article, cybersecurity experts break down how the 401(k) scams work and what you can do to protect your retirement savings.

In his latest article for Security Magazine, Nick Oram explains how initial access brokers (IABs) are fueling the rise of ransomware attacks.

Ransomware-as-a-service (RaaS) groups continue to evolve, leveraging initial access brokers (IABs), affiliate programs, and dark web marketplaces to increase the scale and success of their attacks.

A recent MSN article highlights how fraudsters are ramping up tax-related scams.

In an article for Cybersecurity Insiders, Nick Oram explores how doxing, credential leaks, and PII exposure put executives at risk.

Fortra’s Nick Oram spoke with The Register about the latest ransomware group, Ox Thief, and its aggressive new tactics.

Healthcare organizations are under mounting cyber threats, but regulatory frameworks like Abu Dhabi’s Healthcare Information and Cyber Security (ADHICS) Strategy are paving the way for stronger protections.