Phish in a Barrel: Hunting and Analyzing Phishing Kits at Scale
In a technical paper released today, Duo Labs details the results of a month-long experiment in which we hunted and analyzed over 3,200 unique phishing kits.
DUO LABS
As Duo's security research team, Duo Labs is dedicated to disrupting, de-risking and democratizing complex security topics and sharing their innovations with the broader community. Learn more: duo.com/labs
60 Articles Found
The Apple of Your EFI: Mac Firmware Security Research
The security research team at Duo known as Duo Labs has published a research paper on Apple’s EFI firmware security - learn more about their findings and recommendations, including a link to security tools developed to mitigate the risk. Get the full technical paper here.
New Open-Source Phishing Tools: IsThisLegit and Phinn
We're excited to announce two new open-source tools designed to help administrators prevent, manage, and respond to phishing attacks against their organization - IsThisLegit and Phinn.
Gmail OAuth Phishing Goes Viral
A Gmail phishing attack leveraging OAuth spread quickly to multiple users. Learn what made this attack incredibly successful, as well as ways to protect yourself or your employees.
The macOS Phishing Easy Button: AppleScript Dangers
An attacker can send phishing dialogs to users by writing a few lines of AppleScript, effectively allowing them to steal Apple ID or local user account credentials. Here’s our technical overview of the dangers of AppleScript.