Phishing Tracker

Anatomy of a Ledger Phishing Campaign: From One .eml to Live Credential-Harvesting Infrastructure

One spoofed "Ledger" email led to a 320-site phishing cluster, a deobfuscated seed-phrase harvester on Azure, a fake Ledger Identity API leaking its origin via CNAME, and a lesson in why vision models need a human in the loop.

04 Sep 2026 · 9 min read read →

Phishing Tracker

Phishing Investigation Report - QuickBooks Remittance Lure canvero[.]vu & Related Infrastructure

1. Executive Summary On 2026-08-27 at 14:30 UTC, a UK recipient received a phishing email spoofing an Intuit QuickBooks payment notification. The email

01 Sep 2026 · 12 min read read →

AI Security

GLM 5.3: A Red-Team Model for Blue-Team Work

Z.ai has announced GLM 5.3. It uses the same base model as GLM 5.2. No new pre-training run. No larger foundation model.

16 Aug 2026 · 4 min read read →